Buffer overflow vulnerability in HTTP_HNAP_AUTH field in D-Link http header

The D-Link DIR-890L is a wireless cloud router. A buffer overflow vulnerability exists in the HTTPHNAPAUTH field in the D-Link http header. Since the variable src in hnap's handler function is taken from strstr's split of the HTTPHNAPAUTH field, there is no restriction on the length of the source...

D-Link DIR-880L HNAP和Authentication功能缓冲区溢出漏洞

0 0 0 0...

D-Link DGL5500 HNAP功能缓冲区溢出漏洞

漏洞概述 D-Link DGL5500无线路由器存在缓冲区漏洞，攻击者可利用该漏洞在受影响设备中执行任意代码。 漏洞描述 D-Link DGL5500无线路由器固件HNAP功能中存在缓冲区溢出漏洞。该漏洞允许无线局域网中的攻击者制造缓冲区溢出，然后后执行任意代码。如果该路由器管理界面暴露，攻击者不需要任何认证即可从广域网执行攻击。该缓冲区溢出漏洞主要由于hanp.cgi中的代码没有正确检查边界条件，在伪造特定的POST请求后可以造成缓存区溢出。 漏洞影响 影响D-Link DGL5500无线路由器...

D-Link DGL5500 HNAP Buffer Overflow Vulnerability

D-Link DGL5500 suffers from an HNAP related buffer overflow vulnerability. Title: DGL5500 Un-Authenticated Buffer overflow in HNAP functionality Vendors contacted: William Brown , Patrick Cline email protected CVE: None Note: All these security issues have been discussed with the vendor and vendo...

D-Link DGL5500 - HNAP 缓冲区溢出漏洞

No description provided by source. import socket import struct import string import sys BUFFERSIZE = 2048 Although you can access this URL unauthenticated on WAN connection which is great but need a good shellcode. buffer overflow in checkhnapauth buf = "POST /hnap.cgi HTTP/1.1\r\nHOST:...

D-Link DIR-880L Buffer Overflow Vulnerability

D-Link DIR-880L suffers from multiple buffer overflow vulnerabilities. Title: DIR-880L Buffer overflows in authenticatio and HNAP functionalities. Vendors contacted: William Brown , Patrick Cline email protected CVE: None Note: All these security issues have been discussed with the vendor and...

D-Link DIR-815 Buffer Overflow / Command Injection Vulnerabilities

D-Link DIR-815 suffers from buffer overflow and command injection vulnerabilities. Title: DIR-815 Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline email protected CVE: None Note: All these security issues have been...

D-Link DIR-818W Buffer Overflow / Command Injection

Advisory Information Title: DIR-818W Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated...

D-Link DIR-880L Buffer Overflow

Advisory Information Title: DIR-880L Buffer overflows in authenticatio and HNAP functionalities. Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated that they have fixed...

D-Link DIR-817LW Buffer Overflow / Command Injection Vulnerabilities

D-Link DIR-817LW suffers from buffer overflow and command injection vulnerabilities. Title: DIR-817LW Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline email protected CVE: None Note: All these security issues have...

D-Link DIR-866L Buffer Overflow Vulnerability

D-Link DIR-866L suffers from multiple buffer overflow vulnerabilities. Title: DIR-866L Buffer overflows in HNAP and send email functionalities Vendors contacted: William Brown , Patrick Cline email protected CVE: None Note: All these security issues have been discussed with the vendor and vendor...

D-Link DIR-815 Buffer Overflow / Command Injection

Advisory Information Title: DIR-815 Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated th...

D-Link DIR-890LR - Multiple Buffer Overflow Vulnerabilities

D-Link DIR-890LR - Multiple Buffer Overflow Vulnerabilities Advisory Information Title: DIR-890L/R Buffer overflows in authentication and HNAP functionalities. Date published: July,17th, 2015 Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these...

D-Link DGL5500 - HNAP Buffer Overflow

D-Link DGL5500 - HNAP Buffer Overflow Advisory Information Title: DGL5500 Un-Authenticated Buffer overflow in HNAP functionality Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor...

D-Link DIR-880L - Multiple Buffer Overflow Vulnerabilities

D-Link DIR-880L - Multiple Buffer Overflow Vulnerabilities Advisory Information Title: DIR-880L Buffer overflows in authenticatio and HNAP functionalities. Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed...

D-Link DIR-890L/R Buffer Overflow

Advisory Information Title: DIR-890L/R Buffer overflows in authentication and HNAP functionalities. Date published: July,17th, 2015 Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendo...

D-Link DIR-890L / DIR-890R Buffer Overflow Vulnerability

D-Link DIR-890L/R suffers from multiple buffer overflow vulnerabilities. Title: DIR-890L/R Buffer overflows in authentication and HNAP functionalities. Date published: July,17th, 2015 Vendors contacted: William Brown , Patrick Cline email protected CVE: None Note: All these security issues have...

D-Link DIR-866L Buffer Overflow

Advisory Information Title: DIR-866L Buffer overflows in HNAP and send email functionalities Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated that they have fixed issues...

D-Link DIR-825 Buffer Overflow / Directory Traversal

Advisory Information Title: DIR-825 vC Buffer overflows in authentication,HNAP and ping functionalities. Also a directory traversal issue exists which can be exploited Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been...

D-Link DIR-817LW - Multiple Vulnerabilities

D-Link DIR-817LW - Multiple Vulnerabilities Advisory Information Title: DIR-817LW Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been...