D-Link DIR-825 Router Code Execution

The vulnerability of the tunnelsetparams function in the rp-l2tp component of D-Link’s DIR-825 router software lies in the fact that the operation of writing data beyond the buffer in memory occurs when processing the peerhostname parameter. Exploiting this vulnerability allows a remote attacker ...