[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

LinkSys Router security flaw



PureBytes Links

Trading Reference Links

http://www.pcworld.com/news/article/0,aid,106632,00.asp

Linksys Router Flaw Reported

EtherFast model used in homes could expose small networks to crashing by 
hackers, security firm says.

Paul Roberts, IDG News Service
Monday, November 04, 2002

An easily exploitable software vulnerability in a common home networking 
router by Linksys Group could expose thousands of home users to 
denial-of-service attacks, according to a security advisory issued by 
IDefense, a software security company.

Linksys is one of a number of companies that sell low-priced network gear 
to small-office and home-office customers. The product, the Linksys BEFSR41 
EtherFast Cable/DSL Router, is a low-cost router that allows two or more 
computers to share an Ethernet or broadband Internet connection.

A security hole in some versions of the software--called "firmware"--used 
by the router could allow a remote user to cause the device to crash, 
interrupting Internet service for any PCs attached to it, according to 
IDefense.

The damage might be slight, because it appears that attackers could only 
crash the network; and launching such an attack may require access to a PC 
on the targeted network, the security researchers say. But they recommend 
that users upgrade the router firmware to version 1.42.7 or later to guard 
against such an attack. Linksys representatives were not immediately 
available to comment