ID CVE-2006-1068
Summary Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via (1) a DCC SEND with a single long argument, or (2) a DCC SEND with IP, port, and filesize arguments with a 0 value. This vulnerability may affects NetGear Router models 614 and 624 (including WGR614, WGT624, WGT624SC, WGU624, and possibly others) and is most likely related to VXWorks.
References
Vulnerable Configurations
  • cpe:2.3:h:netgear:netgear_router:*:*:*:*:*:*:*:*
    cpe:2.3:h:netgear:netgear_router:*:*:*:*:*:*:*:*
CVSS
Base: 4.9 (as of 18-10-2018 - 16:30)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 16954
bugtraq
  • 20060303 linksys router + irc DoS
  • 20060304 Various router DoS
  • 20060306 RE: linksys router + irc DoS
  • 20060306 Re: linksys router + irc DoS
misc http://www.hm2k.org/news/1141413208.html
xf multiple-vendor-dccsend-dos(25230)
Last major update 18-10-2018 - 16:30
Published 07-03-2006 - 22:06
Last modified 18-10-2018 - 16:30
Back to Top