Description
The Linksys router Firmware contains multiple vulnerabilities that can allow a remote attacker to cause a denial of service condition. The vulnerabilities are due to a lack of validation on the field length for the sysPasswd, sysPasswdConfirm, and DomainName parameters. An attacker can submit carefully crafted parameter strings for sysPasswd, sysPasswdConfirm, and DomainName to the Gozila.cgi script to crash the router and cause a denial of service condition. This is a non-priority technology vulnerability.
Back to top