Details of VAR-200512-0229

ID

VAR-200512-0229

CVE

CVE-2005-4220

TITLE

NetGear RP114 SYN Flood Denial of Service Vulnerability

Trust: 1.5

sources: CNVD: CNVD-2005-4791 // BID: 15816 // CNNVD: CNNVD-200512-258

DESCRIPTION

Netgear RP114, and possibly other versions and devices, allows remote attackers to cause a denial of service via a SYN flood attack between one system on the internal interface and another on the external interface, which temporarily stops routing between the interfaces, as demonstrated using nmap. NetGear RP114 is a broadband access router suitable for various lines and various access methods. NetGear RP114 has vulnerabilities in handling a large amount of malicious network traffic, causing the device to malfunction. The NetGear RP114 device is prone to a denial of service vulnerability. This issue allows attackers to block network traffic to arbitrarily targeted network services, effectively denying service to legitimate users of the device

Trust: 1.8

sources: NVD: CVE-2005-4220 // CNVD: CNVD-2005-4791 // BID: 15816 // VULHUB: VHN-15428

AFFECTED PRODUCTS

vendor:	netgear	model:	rp114	scope:	eq	version:	3.26	Trust: 1.9
vendor:	none	model:	-	scope:	-	version:	-	Trust: 0.6

sources: CNVD: CNVD-2005-4791 // BID: 15816 // CNNVD: CNNVD-200512-258 // NVD: CVE-2005-4220

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2005-4220
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-200512-258
value:	HIGH
Trust: 0.6
VULHUB:	VHN-15428
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2005-4220
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-15428
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-15428 // CNNVD: CNNVD-200512-258 // NVD: CVE-2005-4220

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.1

sources: VULHUB: VHN-15428 // NVD: CVE-2005-4220

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200512-258

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-200512-258

EXTERNAL IDS

db:	NVD	id:	CVE-2005-4220	Trust: 2.3
db:	BID	id:	15816	Trust: 2.0
db:	SECUNIA	id:	11698	Trust: 1.7
db:	CNNVD	id:	CNNVD-200512-258	Trust: 0.7
db:	CNVD	id:	CNVD-2005-4791	Trust: 0.6
db:	BUGTRAQ	id:	20051212 [SCIP_ADVISORY] NETGEAR RP114 FLOODING DENIAL OF SERVICE	Trust: 0.6
db:	BUGTRAQ	id:	20051212 RE: [FULL-DISCLOSURE] [SCIP_ADVISORY] NETGEAR RP114 FLOODING DENIAL OFSERVICE	Trust: 0.6
db:	BUGTRAQ	id:	20051213 RE: [SCIP_ADVISORY] NETGEAR RP114 FLOODING DENIAL OF SERVICE	Trust: 0.6
db:	VULHUB	id:	VHN-15428	Trust: 0.1

sources: CNVD: CNVD-2005-4791 // VULHUB: VHN-15428 // BID: 15816 // CNNVD: CNNVD-200512-258 // NVD: CVE-2005-4220

REFERENCES

url:	http://www.securityfocus.com/bid/15816	Trust: 1.7
url:	http://secunia.com/advisories/11698/	Trust: 1.7
url:	http://www.securityfocus.com/archive/1/419244/100/0/threaded	Trust: 1.1
url:	http://www.securityfocus.com/archive/1/419243/100/0/threaded	Trust: 1.1
url:	http://www.securityfocus.com/archive/1/419485/100/0/threaded	Trust: 1.1
url:	http://www.securityfocus.com/archive/1/archive/1/419485/100/0/threaded	Trust: 0.6
url:	http://www.securityfocus.com/archive/1/archive/1/419244/100/0/threaded	Trust: 0.6
url:	http://www.securityfocus.com/archive/1/archive/1/419243/100/0/threaded	Trust: 0.6
url:	http://www.netgear.com/	Trust: 0.3
url:	http://www.netgear.com/product_view.asp?xrp=4&yrp=12&zrp=93	Trust: 0.3

sources: VULHUB: VHN-15428 // BID: 15816 // CNNVD: CNNVD-200512-258 // NVD: CVE-2005-4220

CREDITS

Marc Ruef marc.ruef@computec.ch

Trust: 0.6

sources: CNNVD: CNNVD-200512-258

SOURCES

db:	CNVD	id:	CNVD-2005-4791
db:	VULHUB	id:	VHN-15428
db:	BID	id:	15816
db:	CNNVD	id:	CNNVD-200512-258
db:	NVD	id:	CVE-2005-4220

LAST UPDATE DATE

2024-08-14T13:40:28.270000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2005-4791	date:	2005-12-12T00:00:00
db:	VULHUB	id:	VHN-15428	date:	2018-10-19T00:00:00
db:	BID	id:	15816	date:	2005-12-12T00:00:00
db:	CNNVD	id:	CNNVD-200512-258	date:	2007-03-30T00:00:00
db:	NVD	id:	CVE-2005-4220	date:	2018-10-19T15:40:35.847

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2005-4791	date:	2005-12-12T00:00:00
db:	VULHUB	id:	VHN-15428	date:	2005-12-14T00:00:00
db:	BID	id:	15816	date:	2005-12-12T00:00:00
db:	CNNVD	id:	CNNVD-200512-258	date:	2005-12-14T00:00:00
db:	NVD	id:	CVE-2005-4220	date:	2005-12-14T11:03:00