Submit #558297: D-Link DIR-600L 2.07B01 Buffer Overflowinfo

TitleD-Link DIR-600L 2.07B01 Buffer Overflow
Descriptiond-link DIR-600L has buffer overflow vulnerability in formLogin.The program receives the value of the host field through the websGetVar function,concatenates it into a formatted string using the sprintf function. Since the sprintf lacks the boundary check and the attacker's input length isn't checked either , buffer overflow exists.
Source⚠️ https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir600l/Buffer_overflow-formLogin-curTime/README.md
User
 B1Nn (UID 84136)
Submission04/15/2025 14:07 (12 months ago)
Moderation05/05/2025 18:59 (20 days later)
StatusAccepted
VulDB entry307461 [D-Link DIR-600L up to 2.07B01 formLogin host buffer overflow]
Points18

Interested in the pricing of exploits?

See the underground prices here!