Title: 3Com HomeConnect Cable Modem External with USB Denial of Service Vulnerability
Severity: HIGH
Description:
The 3Com HomeConnect Cable Modem External with USB is used to provide home pc broadband Internet connectivity. These modems do not filter TCP port 80 traffic.
A problem in the firmware running the cable modem could allow a denial of service. It is possible to reset the modem by connecting to the HTTP service and requesting a long string in the following format:
http://targetip/AAAAAA..... where A is repeated 100 times.
This problem makes it possible for a remote user to deny service to legimate users of networks serviced by the modem.
This vulnerability is most likely related to BugTraq ID 2721.
It is possible that this behaviour is due to a buffer overflow condition. If this is the case, an the attacker is familiar with the firmware/hardware, it may be possible to force the execution of attacker-supplied instructions.
Affected Products:
- 3Com HomeConnect Cable Modem External with USB
References:
- 3Com: Support for Products
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
