CVE:CVE-2004-0580
CNNVD:CNNVD-200408-030
Linksys拥有多种网络设备产品线。
多个Linksys设备在处理DHCP消息时存在问题，远程攻击者可以利用这个漏洞获得敏感信息或对设备进行拒绝服务攻击。
这些设备内置的DHCP服务器存在安全漏洞，这些设备的DHCP服务器不正确处理BOOTP包，在返回BOOTP应答时会把内存中的部分信息填充到BOOTP字段中，因此攻击者可以通过嗅探网络通信获得敏感信息，也可能导致攻击者对设备进行拒绝服务攻击。
solution:Upgrade linksys befcmu10 to a higher version than *; Upgrade linksys befn2ps4 to a higher version than *,1.42.7,and avoid the version 1.42.7; Upgrade linksys befsr11 to a higher version than 1.40.2,1.41,1.42.3,1.42.7,1.43,1.43.3,1.44,and avoid the version 1.40.2,1.41,1.42.3,1.42.7,1.43,1.43.3,1.44; Upgrade linksys befsr41 to a higher version than 1.35,1.36,1.37,1.38.5,1.39,1.40.2,1.41,1.42.3,1.42.7,1.43,1.43.3,1.44,1.45.7,and avoid the version 1.35,1.36,1.37,1.38.5,1.39,1.40.2,1.41,1.42.3,1.42.7,1.43,1.43.3,1.44,1.45.7; Upgrade linksys befsr41w to a higher version than *; Upgrade linksys befsr81 to a higher version than *,2.42.7.1,2.44,and avoid the version 2.42.7.1,2.44; Upgrade linksys befsru31 to a higher version than 1.40.2,1.41,1.42.3,1.42.7,1.43,1.43.3,1.44,and avoid the version 1.40.2,1.41,1.42.3,1.42.7,1.43,1.43.3,1.44; Upgrade linksys befsx41 to a higher version than 1.42.7,1.43,1.43.3,1.43.4,1.44,1.44.3,1.45.3,and avoid the version 1.42.7,1.43,1.43.3,1.43.4,1.44,1.44.3,1.45.3; Upgrade linksys befvp41 to a higher version than *,1.39.64,1.40.3f,1.40.4,1.42.7,and avoid the version 1.39.64,1.40.3f,1.40.4,1.42.7; Upgrade linksys rv082 to a higher version than *; Upgrade linksys wap55ag to a higher version than 1.0.7,and avoid the version 1.0.7; Upgrade linksys wrt54g to a higher version than 1.42.3,2.00.8,and avoid the version 1.42.3,2.00.8