Motorolla Surfboard cable modem multiple security vulnerabilities

DoS conditions, crossite request forgery...

Sea-Surfing on the Motorola Surfboard

More information about this flaw can be found here: http://www.rooksecurity.com/blog/?p=4 Motorola Surfboard Cable Modems suffer from two Denial of Service attacks by means of Cross Site Request Forgery. The latest version of The Motorola Surfboard is affected at the time of the writing. Restarts...

motsurf-csrf.txt

More information about this flaw can be found here: http://www.rooksecurity.com/blog/?p=4 Motorola Surfboard Cable Modems suffer from two Denial of Service attacks by means of Cross Site Request Forgery. The latest version of The Motorola Surfboard is affected at the time of the writing. Restarts...

DEBIAN-CVE-2007-3393

Off-by-one error in the DHCP/BOOTP dissector in Wireshark before 0.99.6 allows remote attackers to cause a denial of service crash via crafted DHCP-over-DOCSIS packets...

Hacker attack and Defense of the PPPoE authentication and use-vulnerability and early warning-the black bar safety net

A Foreword In recent years, Internet data traffic has developed rapidly, broadband users showed explosive growth, the operators in the use of xDSL, LAN, HFC, wireless and other access methods at the same time, in order to build an operable, manageable and profitable broadband network, is very...

CVE-2006-5196

The CVE affects the Motorola SURFboard SB4200 Cable Modem HTTP interface. A remote attacker can crash the device by sending a request where MfcISAPICommand is SecretProc and the Secret parameter contains a long string, leading to a denial of service. The NVD score is CVSSv2 7.8 (HIGH) with networ...

CVE-2006-5196

The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service device crash via a request with MfcISAPICommand set to SecretProc and a long string in the Secret parameter...

SNMP 'cable-docsis' Community String

Binary data 3749.prm...

SNMP 'cable-docsis' Community String

Binary data 3750.prm...

CVE-2005-4275

Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD, as demonstrated using hping2. NOTE: the provenance of this issue is unknown; the detail...

CVE-2005-4275

CVE-2005-4275 affects the Scientific Atlanta DPX2100 Cable Modem. A remote attacker can cause a denial of service (device crash) by sending an IP packet with identical source and destination IPs and ports and the SYN flag set (LanD), demonstrated with hping2. The provenance is noted as unknown; d...

CVE-2005-4275

Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD, as demonstrated using hping2. NOTE: the provenance of this issue is unknown; the detail...

CVE-2005-4215

Motorola SB5100E Cable Modem allows remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LAND...

CVE-2005-4215

Motorola SB5100E Cable Modem is affected by a LAND-style denial-of-service described in CVE-2005-4215. The vulnerability is triggered by receiving an IP packet where the source and destination IPs and ports are identical, with the SYN flag set, causing the device to crash. The available documents...

CVE-2005-4215

Motorola SB5100E Cable Modem allows remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LAND...

Scientific Atlanta DPX2100 Cable Modem - LanD Packet Denial of Service

Scientific Atlanta DPX2100 Cable Modem - LanD Packet Denial of Service source: www.securityfocus.com/bid/15870/info Scientific Atlanta DPX2100 cable modems are prone to a denial of service vulnerability. These devices are susceptible to a remote denial of service vulnerability when handling TCP...

Motorola SB5100E Cable Modem DoS

Hello. Sending "land" packet to motorola device, will cause it to crash. "LanD" packet is simple TCP syn packet: Source IP = 192.168.100.1 Destanation IP = 192.168.100.1 Source Port = 80 Destanation Port =80 SYN Flag= 1 One packet can crash modem and all network on cable part will be unreacheble...

Motorola cable modems DoS

Land attack causes device to crash...

CVE-2002-2159

The CVE affects Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with firmware 1.42.7, where installing this upgrade opens TCP port 5678 for remote administration even when Block WAN and Remote Admin are disabled. This creates a potential for remote access by attackers. Publicly availabl...

Linksys Gozila CGI DoS Vulnerability

The Linksys BEFSR41 EtherFast Cable/DSL Router crashes if somebody accesses the Gozila CGI without argument on the web administration interface. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...