Linksys WRT54GC Web Management Interface Buffer Overflow Vulnerability

Last Update Date: 1 Feb 2011 Release Date: 24 Jan 2011 6568 Views

RISK: High Risk

TYPE: Servers - Network Management

A vulnerability has been identified in Linksys WRT54GC, which could be exploited by malicious people to take complete control of a vulnerable system. This issue is caused by a boundary error when handling HTTP POST requests sent to the web-based management interface. This can be exploited to cause a buffer overflow via an overly long string sent in a POST request.

Impact

Remote Code Execution

System / Technologies affected

Linksys WRT54GC firmware versions prior to 1.06.1.

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to firmware version 1.06.1.

Vulnerability Identifier

No CVE information is available

Source

Secunia