Vulnerability In Linksys Cable/DSL Router

ispcay writes "Yahoo has published an article on a Linksys vulnerability. An easily exploitable software vulnerability in a common home networking router by Linksys Group could expose thousands of home users to denial of service attacks, according to a security advisory issued by iDefense, a software security company." The article's kinda sparse on details, but does mention that the vulnerability is fixed in the latest firmware release. Upgrade 'em if ya got 'em!

Comments

Linksys SUCKS!!!

[Wakko Warner]

If this thing behaves anything like the way my WAP-11 wireless access point behaves, I feel really sorry for the people using this as their firewall.

There were days I couldn't even reach downstairs with the damned thing. . .

- A.P.

SMC

[awerg]

Thank god I got a SMC router instead of a Linksys!

Does that mean that my win2k, winXP and win98 machines are safe now?

Remote management and firmware

[shird]

Wouldnt it be nice if the remote management actually allowed you to remotely manage the router/modem, to be able to flash the firmware - the name does seem to suggest that. That way, everyone who was vulnerable, would be all those who could be immediately fixed.

Re:Not too much of an issue- wrong

[tulare]

And why in God's own bumfucking earth would you run a crappy router like this in a LAB? Seriously, you can get a decent 8-port switch for under fifty bux, grab a 486 at goodwill (frequently for free, as nobody wants a 486 anymore except cash-starved K-12 net admins looking for cheap routers), toss in a couple of old nics, write five lines of iptables, and guess what? You have a hell of a lot more secure NAT solution for your lab than a crufty plastic home gateway router. Assuming you don't let the kids see your root password. Don't get me wrong, I like my BEFSR41, but no way in hell would I ever use it outside of my house.