ID

VAR-200803-0511

TITLE

Livebox TP Router Remote Overflow Denial of Service Vulnerability

DESCRIPTION

Livebox TP is a broadband router widely used in Poland. The Livebox TP has an input validation vulnerability when processing malformed user requests, and a remote attacker could exploit this vulnerability to control the server. The ADI Convergence Galaxy FTP server embedded in the Livebox TP does not properly validate user input parameters. If a remote attacker sends a specially crafted message to the router's FTP service, it may trigger a buffer overflow, causing the service to crash. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Given the nature of this issue, remote code execution may also be possible, but this has not been confirmed. ---------------------------------------------------------------------- A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI has been released. The new version includes many new and advanced features, which makes it even easier to stay patched. Download and test it today: https://psi.secunia.com/ Read more about this new version: https://psi.secunia.com/?page=changelog ---------------------------------------------------------------------- TITLE: Livebox TP Router ADI Convergence Galaxy FTP Server Denial of Service SECUNIA ADVISORY ID: SA29199 VERIFY ADVISORY: http://secunia.com/advisories/29199/ CRITICAL: Moderately critical IMPACT: DoS WHERE: >From remote OPERATING SYSTEM: Livebox TP Router http://secunia.com/product/17862/ DESCRIPTION: 0in has reported a vulnerability in Livebox TP routers, which can be exploited by malicious people to cause a DoS (Denial of Service). Other versions may also be affected. SOLUTION: Restrict network access to the FTP service. PROVIDED AND/OR DISCOVERED BY: 0in ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

IOT TAXONOMY

AFFECTED PRODUCTS

CVSS

THREAT TYPE

network

TYPE

Boundary Condition Error

EXTERNAL IDS

REFERENCES

CREDITS

0in is credited with the discovery of this vulnerability.

SOURCES

LAST UPDATE DATE

2022-05-17T22:48:12.003000+00:00

SOURCES UPDATE DATE

SOURCES RELEASE DATE