D-Link DIR-400 Unspecified Remote Buffer Overflow Vulnerability

Bugtraq ID:	36237
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 03 2009 12:00AM
Updated:	Sep 03 2009 06:02PM
Credit:	Intevydis
Vulnerable:	D-Link DIR-400 0
Not Vulnerable:

D-Link DIR-400 Unspecified Remote Buffer Overflow Vulnerability

D-Link DIR-400 is prone to an unspecified remote buffer-overflow vulnerability because it fails to bounds-check user-supplied input before copying it into an insufficiently sized memory buffer.

Exploiting this vulnerability may allow remote attackers to execute arbitrary code in the context of the affected device.

D-Link DIR-400 Unspecified Remote Buffer Overflow Vulnerability

A working commercial exploit is available through Intevydis. This exploit is not otherwise publicly available or known to be circulating in the wild.

D-Link DIR-400 Unspecified Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

D-Link DIR-400 Unspecified Remote Buffer Overflow Vulnerability

References:

• D-Link Homepage (D-Link)
  
• VulnDisco Pack Professional (Intevydis)