CVE-2006-1068
Last modified
CVE-2006-1068 is a vulnerability of currently unknown severity. Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via (1) a DCC SEND with a single long argument, or (2) a DCC SEND with IP, port, and filesize arguments with a 0 value.. EPSS estimates a 1.76% chance of exploitation in the next 30 days.
Description
Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via (1) a DCC SEND with a single long argument, or (2) a DCC SEND with IP, port, and filesize arguments with a 0 value.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Netgear Router | All versions |
References
- http://www.securityfocus.com/archive/1/426863/100/0/threadedVendor Advisory
- http://www.securityfocus.com/archive/1/426863/100/0/threadedVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-1068?
How severe is CVE-2006-1068?
How do I fix CVE-2006-1068?
Are you affected by CVE-2006-1068?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
