CVE-2002-1865: Buffer Overflow
First published: Tue Dec 31 2002(Updated: )
Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2 through 1.42.7 and Linksys WAP11 1.3 and 1.4, allows remote attackers to cause a denial of service (crash) via a long header, as demonstrated using the Host header.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linksys BEFW11S4 v3 | =1.37.9b | |
| Linksys BEFW11S4 v3 | =1.40.3 | |
| D-Link DI-804 | =4.68 | |
| Linksys WAP11 | =1.4 | |
| D-Link DI-704 | =2.56_b6 | |
| D-Link DI-704 | =2.56_b5 | |
| Linksys BEFW11S4 v3 | =1.37.2 | |
| Linksys BEFW11S4 v3 | =1.4.2.7 | |
| Linksys BEFW11S4 v3 | =1.42.7 | |
| Linksys WAP11 | =1.3 | |
| Linksys BEFW11S4 v3 | =1.37.2b |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2002-1865?
CVE-2002-1865 is rated as a high severity vulnerability due to its potential to cause denial of service by crashing the affected devices.
How do I fix CVE-2002-1865?
To mitigate CVE-2002-1865, users should upgrade to the latest firmware versions provided by D-Link and Linksys for the affected models.
Which devices are affected by CVE-2002-1865?
CVE-2002-1865 affects multiple D-Link and Linksys devices, including the D-Link DI-804 and various Linksys BEFW11S4 and WAP11 models.
Can CVE-2002-1865 be exploited remotely?
Yes, CVE-2002-1865 can be exploited remotely by attackers to initiate a denial of service attack.
What symptoms might indicate a CVE-2002-1865 exploit?
A symptom of a CVE-2002-1865 exploit might include unexpected crashes or reboots of the affected networking devices.
- agent/type
- agent/first-publish-date
- agent/references
- agent/author
- agent/weakness
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/linksys
- canonical/linksys befw11s4 v3
- version/linksys befw11s4 v3/1.37.9b
- version/linksys befw11s4 v3/1.40.3
- vendor/d-link
- canonical/d-link di-804
- version/d-link di-804/4.68
- canonical/linksys wap11
- version/linksys wap11/1.4
- canonical/d-link di-704
- version/d-link di-704/2.56_b6
- version/d-link di-704/2.56_b5
- version/linksys befw11s4 v3/1.37.2
- version/linksys befw11s4 v3/1.4.2.7
- version/linksys befw11s4 v3/1.42.7
- version/linksys wap11/1.3
- version/linksys befw11s4 v3/1.37.2b