EUVD-2008-1253

Malware in sbrugna...

Authentication flaw

cgi-bin/setupdns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns11, dns12, dns13, and dns14 parameters. NOTE: it was later reported that...

Design/Logic Flaw

cgi-bin/setupvirtualserver.exe on the Belkin F5D7230-4 router with firmware 9.01.10 allows remote attackers to cause a denial of service control center outage via an HTTP request with invalid POST data and a "Connection: Keep-Alive" header...

CVE-2008-1245

cgi-bin/setupvirtualserver.exe on the Belkin F5D7230-4 router with firmware 9.01.10 allows remote attackers to cause a denial of service control center outage via an HTTP request with invalid POST data and a "Connection: Keep-Alive" header...

CVE-2008-1245

Summary: CVE-2008-1245 affects Belkin Wireless G Router model F5D7230-4 (firmware 9.01.10). The vulnerability lies in the CGI script cgi-bin/setup_virtualserver.exe, which mishandles HTTP POST data when a request includes a "Connection: Keep-Alive" header, enabling remote attackers to trigger a d...

CVE-2008-1245

cgi-bin/setupvirtualserver.exe on the Belkin F5D7230-4 router with firmware 9.01.10 allows remote attackers to cause a denial of service control center outage via an HTTP request with invalid POST data and a "Connection: Keep-Alive" header...