Description
Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via (1) a DCC SEND with a single long argument, or (2) a DCC SEND with IP, port, and filesize arguments with a 0 value.
References
- multiple-vendor-dccsend-dos(25230) vdb-entry
- 20060306 Re: linksys router + irc DoS mailing-list
- http://www.hm2k.org/news/1141413208.html
- 20060304 Various router DoS mailing-list
- 20060303 linksys router + irc DoS mailing-list
- 16954 vdb-entry
- 20060306 RE: linksys router + irc DoS mailing-list