CVE:CVE-2002-1312
CNNVD:CNNVD-200211-037
Linksys开发了多种宽带路有器设备，包括了BEFW11S4、BEFSRU31等，其中都包含WEB管理接口。
路由器的WEB管理接口对超长密码处理不正确，远程攻击者可以利用这个漏洞进行缓冲区溢出攻击，使设备崩溃。
攻击者可以提交密码字段包含超长字符串的请求给路由器的WEB管理接口系统，当设备尝试处理此畸形输入请求时，可导致设备崩溃。需要重新启动恢复正常功能。
默认情况下远程管理接口不启用。
solution:Upgrade linksys befn2ps4 to a higher version than 1.42.7,and avoid the version 1.42.7; Upgrade linksys befsr11 to a higher version than 1.42.7,1.43,and avoid the version 1.42.7,1.43; Upgrade linksys befsr41 to a higher version than 1.42.7,1.43,and avoid the version 1.42.7,1.43; Upgrade linksys befsr81 to a higher version than 2.42.7.1,and avoid the version 2.42.7.1; Upgrade linksys befsru31 to a higher version than 1.42.7,1.43,and avoid the version 1.42.7,1.43; Upgrade linksys befsx41 to a higher version than 1.42.7,and avoid the version 1.42.7; Upgrade linksys befvp41 to a higher version than 1.42.7,and avoid the version 1.42.7; Upgrade linksys befw11s4 to a higher version than 1.4.2.7,1.4.3,and avoid the version 1.4.2.7,1.4.3; Upgrade linksys hpro200 to a higher version than 1.42.7,and avoid the version 1.42.7