Sign-up

ID

VAR-200109-0103


CVE

CVE-2001-1137


TITLE

DLink IP Fragmented message causing a denial of service vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200109-016

DESCRIPTION

D-Link DI-704 Internet Gateway firmware earlier than V2.56b6 allows remote attackers to cause a denial of service (reboot) via malformed IP datagram fragments. The DLink Dl-704 is a DSL/Cable router and switch designed for home network use. A problem has been discovered in the Dl-704 router. Upon receiving a high amount of fragmented IP packets, the router begins to become resource starved. After receiving these packets for a period greater than two minutes, the router will become unstable, ceasing operation. This results in a denial of service users on either side of the router. A power cycling is required to resume normal operation

Trust: 1.26

sources: NVD: CVE-2001-1137 // BID: 3306 // VULHUB: VHN-3942

AFFECTED PRODUCTS

vendor:d linkmodel:dl-704scope:eqversion:v2.56b5

Trust: 1.6

vendor:d linkmodel:dl-704 b5scope:eqversion:2.56

Trust: 0.3

vendor:d linkmodel:dl-704 b6scope:neversion:2.56

Trust: 0.3

sources: BID: 3306 // CNNVD: CNNVD-200109-016 // NVD: CVE-2001-1137

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2001-1137
value: MEDIUM

Trust: 1.0

CNNVD: CNNVD-200109-016
value: MEDIUM

Trust: 0.6

VULHUB: VHN-3942
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2001-1137
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-3942
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-3942 // CNNVD: CNNVD-200109-016 // NVD: CVE-2001-1137

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2001-1137

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200109-016

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-200109-016

EXPLOIT AVAILABILITY

sources:
            
            
            VULHUB: VHN-3942

EXTERNAL IDS
db:NVDid:CVE-2001-1137
Trust: 2.0
db:BIDid:3306
Trust: 2.0
db:CNNVDid:CNNVD-200109-016
Trust: 0.7
db:BUGTRAQid:20010906 MALFORMED FRAGMENTED PACKETS DOS DLINK FIREWALL/ROUTERS
Trust: 0.6
db:XFid:7090
Trust: 0.6
db:SEEBUGid:SSVID-74943
Trust: 0.1
db:EXPLOIT-DBid:21103
Trust: 0.1
db:VULHUBid:VHN-3942
Trust: 0.1
sources:
            
            
            VULHUB: VHN-3942 // 
            
            
            
            BID: 3306 // 
            
            
            
            CNNVD: CNNVD-200109-016 // 
            
            
            
            NVD: CVE-2001-1137

REFERENCES
url:http://www.securityfocus.com/bid/3306
Trust: 1.7
url:http://www.securityfocus.com/archive/1/212532
Trust: 1.7
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/7090
Trust: 1.1
url:http://xforce.iss.net/static/7090.php
Trust: 0.6
sources:
            
            
            VULHUB: VHN-3942 // 
            
            
            
            CNNVD: CNNVD-200109-016 // 
            
            
            
            NVD: CVE-2001-1137

CREDITS
This vulnerability was announced by Fate Labs via Bugtraq on September 6, 2001.
Trust: 0.3
sources:
            
            
            BID: 3306

SOURCES
db:VULHUBid:VHN-3942
db:BIDid:3306
db:CNNVDid:CNNVD-200109-016
db:NVDid:CVE-2001-1137

LAST UPDATE DATE
2024-08-14T15:41:02.457000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-3942date:2017-12-19T00:00:00
db:BIDid:3306date:2009-07-11T07:56:00
db:CNNVDid:CNNVD-200109-016date:2005-10-20T00:00:00
db:NVDid:CVE-2001-1137date:2017-12-19T02:29:34.613

SOURCES RELEASE DATE
db:VULHUBid:VHN-3942date:2001-09-06T00:00:00
db:BIDid:3306date:2001-09-06T00:00:00
db:CNNVDid:CNNVD-200109-016date:2001-09-06T00:00:00
db:NVDid:CVE-2001-1137date:2001-09-06T04:00:00