CVE-2004-0580 in Linksys

Summary

DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

06/18/2004

Disclosure

08/06/2004

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
82023	Linksys bootp Memory information disclosure	200	Proof-of-Concept	Not defined	CVE-2004-0580
658	Linksys BEGSR41/BEFW11S4 information disclosure	200	Proof-of-Concept	Official fix	CVE-2004-0580

Sources

• MITRE
• NVD
• CVE Details