| 标题 | D-Link DIR-815 RevA v1.01 Stack-based Buffer Overflow |
|---|
| 描述 | In the D-Link DIR-815 RevA router firmware version v1.01, the hedwig.cgi CGI program has a stack overflow vulnerability.
The attacker can use the stack overflow to hijack the program flow, main->hedwigcgi_main->cgibin_parse_request()->sub_403B10->sub_403794, and only need to post the parameters to successfully getshell |
|---|
| 来源 | ⚠️ https://github.com/Thir0th/Thir0th-CVE/blob/main/D-Link%20DIR-815%20RevA%20v1.01.md |
|---|
| 用户 | liuchangwei (UID 86561) |
|---|
| 提交 | 2025-06-13 06時09分 (1 年前) |
|---|
| 管理 | 2025-06-19 12時07分 (6 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 313324 [D-Link DIR-815 1.01 hedwig.cgi sub_403794 内存损坏] |
|---|
| 积分 | 19 |
|---|