The vulnerabilities of the functions cgi_speed(), cgi_dhcpd_lease(), cgi_dns(), cgi_set_ip(), cgi_upnp_del(), cgi_dhcpd(), cgi_upnp_add(), and cgi_upnp_edit in the script /cgi-bin/network_mgr.cgi of the D-Link DNS-320 network storage software allow a intruder to execute arbitrary commands.

The vulnerabilities of the functions cgispeed, cgidhcpdlease, cgidns, cgisetip, cgiupnpdel, cgidhcpd, cgiupnpadd, and cgiupnpedit in the script /cgi-bin/networkmgr.cgi of the D-Link DNS-320 network storage software are related to the lack of measures for cleaning input data. Exploiting these...