Summaryinfo

A vulnerability marked as problematic has been reported in D-Link DIR-300 1.05. The affected element is an unknown function of the file tools_vct.xgi of the component HTTP Header Handler. This manipulation causes race condition. Furthermore, there is an exploit available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability has been found in D-Link DIR-300 1.05 (Router Operating System) and classified as problematic. Affected by this vulnerability is an unknown code of the file tools_vct.xgi of the component HTTP Header Handler. The manipulation with an unknown input leads to a race condition vulnerability. The CWE definition for the vulnerability is CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. As an impact it is known to affect integrity.

The weakness was shared 04/22/2013 by Michael Messner (m1k3) with s3cur1ty as m1adv2013-014 as not defined advisory (Website). The advisory is shared at s3cur1ty.de. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details and also a public exploit are known.

A public exploit has been developed by m-1-k-3 and been published immediately after the advisory. It is possible to download the exploit at exploit-db.com. It is declared as proof-of-concept.

Upgrading to version Firmware 1.06 or 4.14b02 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

The vulnerability is also documented in the databases at Exploit-DB (24975) and OSVDB (92696†). The entries VDB-8508, VDB-8510, VDB-8511 and VDB-8512 are related to this item. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Affected

• DIR-300 Firmware 1.05
• DIR-615 Firmware 4.13

Productinfo

Type

• Router Operating System

Vendor

• D-Link

Name

• DIR-300

Version

• 1.05

License

• commercial

Website

• Vendor: https://www.dlink.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion