----------------------------------------------------------------------

Do you need accurate and reliable IDS / IPS / AV detection rules?

Get in-depth vulnerability details:
http://secunia.com/binary_analysis/sample_analysis/

----------------------------------------------------------------------

TITLE:
Linksys WAP4400N Denial of Service and SNMPv3 Vulnerability

SECUNIA ADVISORY ID:
SA32259

VERIFY ADVISORY:
http://secunia.com/advisories/32259/

CRITICAL:
Moderately critical

IMPACT:
Unknown, DoS

WHERE:
>From remote

OPERATING SYSTEM:
Linksys WAP4400N
http://secunia.com/advisories/product/20144/

DESCRIPTION:
Some vulnerabilities have been reported in Linksys WAP4400N, where
one has unknown impacts and the other can be exploited by malicious
people to cause a DoS (Denial of Service).

1) An error within the processing of association requests can be
exploited to reboot or hang-up the device by sending a specially
crafted association request.

Successful exploitation requires that the access point runs in WEP
mode.

2) An unspecified vulnerability exists within SNMPv3. No more
information is currently available.

SOLUTION:
Update to firmware version 1.2.17.
http://www.linksys.com/servlet/Satellite?c=L_Download_C2&childpagename=US%2FLayout&cid=1115417109974&packedargs=sku%3D1152745215776&pagename=Linksys%2FCommon%2FVisitorWrapper

PROVIDED AND/OR DISCOVERED BY:
1) Laurent Butti and Julien Tinnes, France Telecom / Orange
2) Reported by the vendor.

ORIGINAL ADVISORY:
http://www.linksys.com/servlet/Satellite?c=L_Download_C2&childpagename=US%2FLayout&cid=1115417109974&packedargs=sku%3D1152745215776&pagename=Linksys%2FCommon%2FVisitorWrapper

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------