If you use Linksys BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, you may be vulnerable.

A flaw in the built-in DHCP server causes the routers to send BOOTP reply packets that contain sensitive information about traffic running through the devices as well as other random information about the router's configuration. To fix this, you need to apply the latest firmware (dated 6/24/2004) to your router. Go here:

New Firmware for Linksys Routers

i_XpUser

Thanks XpUser, sometimes we forget that our routers need firmware updates for security reasons.

Thanks, capt

I also forgot all about the router until Sabertooth and Per challenged me to take the GRC Shield-Up Port Test in THIS thread. My BEFSR41flunked Port 113 and that was how I found the new firmware.

Happy Computing :-)

i_XpUser

As a courtesy FYI:

BEFORE YOU APPLY ROUTER FIRMWARE:

1. You should write down all of your router configuration settings, particularly PPPoE.
2. Remember that your router password will reverted to default (admin).

i_XpUser

here is a discussion of the new firmware.

http://www.dslreports.com/forum/remark,10710896~mode=flat

If you set a MAC address and have problems, they tell how to reset router properly.

dslreports.com has good forums about all routers.

This doesn't surprise me ,since Cisco has so much buggy IOS in their main line of routers .

This doesn't surprise me ,since Cisco has so much buggy IOS in their main line of routers .

vipergg,

You're entitled to express your opinion. Does THIS surprise you that D-Link routers are also buggy?

i_XpUser

Afternoon all,
Just a quick note. I installed the upgraded firmware and that is when the problems started!!!!
I spent 11/2 hours with Verizon DSL support and 2 hours with Linksys Tech Support trying to correct an e-mail problem that started as soon as I installed the new firmware.
The only way I could fix the problem was to revert back to a previous firmware version that was finally given to me by the Linksys VPN Tech. Regular tech support told me that the older firmwares were no longer available!!!!
I will not try to upgrade to version 1.46 again.
Still trying to quiet wife down about screwing up her e-mail. lol,
XDon

I'm with Verizon DSl and I'm using BEFSR41 Version 1. I applied the 1.46 patch and everythings working just great.

i_XpUser

Hi XP,
I am using the same router ( except Version 2) and had to go back to Firmware 1.44.2. That is which version the Linksys VPN Tech told me to use. Don't know what happened, but went through HELL from the wife and also tried and double checked EVERY setting in Outlook Express, Ethernet,and Router before going back to 1.44.2.
sure glad that fixed it,
XDon

Hi XDonJuan

I guess you're better off sticking with 1.44.2 than going through HELL from the wife.

I don't know if it’s just me but every once in a while I used to received this notice from the Local Area Connection icon in the system tray:

Local Area Connection A Network cable is unplugged immediately followed by Local Area Connection is now connected.

I thought my old BEFSR41 was about to wear out its usefulness after 18 months of excellent service. Recently, Best Buy had on sale BEFSR41 (Version 3?) for $39.99 (after $20 rebate) so I bought another. Then came along this firmware fix. After I applied the fix, the above disconnect problem also disappeared along with open port 113. Now I’m not quite sure what to do with the one I just purchased – keep it or return it for full refund. BTW I haven’t yet opened the box nor submit my rebate applications.

Regards

i_XpUser

"......I’m not quite sure what to do with the one I just purchased – keep it or return it for full refund. BTW I haven’t yet opened the box nor submit my rebate applications".

Now I am sure I can definitely help you with that one, howza'bout sending it to me and you can write it off your tax as a charitable donation..;~) heh.

____________________________
The greatest risk is not taking one

Report Offensive Follow Up For Removal

Wonderful - never thought of it - givmme the name/addy of your charity plus a copy of IRS statement. LOL

i_XpUser

Hey! My business is a non profit organization!

It wasn't meant to be, but that's the way it's turning out.

Send it my way!

LOL

Musky
If the voices inside my head paid rent, I'd be rich!

Report Offensive Follow Up For Removal

Did this vulnerability also include the BEFSX41 CABLE/DSL Firewall Router? If so is it the same firmware download or another one? BTW XpUser I use an APC Battery Backup Unit and installed the software to automatically shutdown the system in there is a power outage while my system is on and I'm away from it. When I wake my computer from sleep mode I get that same message till I click on it (my cable line also gets conditioned through the battery backup). If you were also using a battery backup that may have been why.