CVE-2004-0580 Information

Description

DHCP on Linksys BEFSR11 BEFSR41 BEFSR81 and BEFSRU31 Cable/DSL Routers firmware version 1.45.7 does not properly clear previously used buffer contents in a BOOTP reply packet which allows remote attackers to obtain sensitive information.

Reference

http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_20\created=1086294093&p_sid=pU1X1idh&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ920\JnBfcm93X2NudD02NTQmcF9wYWdlPTE&p_li=* http://marc.info/?l=bugtraq&m=108662876129301&w=2 http://secunia.com/advisories/11606 http://securitytracker.com/alerts/2004/May/1010288.html http://www.osvdb.org/6325 http://www.securityfocus.com/bid/10329 https://exchange.xforce.ibmcloud.com/vulnerabilities/16142