| शीर्षक | TOTOLINK LR1200GB V9.1.0u.6619_B20230130 Buffer Overflow |
|---|
| विवरण | A vulnerability in TOTOLINK LR1200GB allows remote unauthenticated attackers to become authenticated and potentially lead to Remote Code Execution due to a stack overflow vulnerability in the web interface.The loginAuth function within the cstecgi.cgi implementation handles the authentication process, parsing parameters such as username, password, verify, flag, and topicurl from the incoming request and there are some hidden parameters like http_host which is taken from the client has stack buffer overflow can potentially lead to authentication bypass and successively we can achieve remote code execution. |
|---|
| स्रोत | ⚠️ https://gist.github.com/manishkumarr1017/30bca574e2f0a6d6336115ba71111984 |
|---|
| उपयोगकर्ता | manish1017 (UID 63661) |
|---|
| सबमिशन | 14/02/2024 04:26 AM (3 साल पहले) |
|---|
| संयम | 22/02/2024 08:00 PM (9 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 254574 [Totolink LR1200GB 9.1.0u.6619_B20230130/9.3.5u.6698_B20230810 Web Interface /cgi-bin/cstecgi.cgi loginAuth http_host बफ़र ओवरफ़्लो] |
|---|
| अंक | 0 |
|---|