Dlink Di-604 IP Textfield Size Cross-Site Scripting and Denial of Service Vulnerabilities
BID:40691
Info
Dlink Di-604 IP Textfield Size Cross-Site Scripting and Denial of Service Vulnerabilities
| Bugtraq ID: | 40691 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-2292 CVE-2010-2293 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 09 2010 12:00AM |
| Updated: | Apr 13 2015 09:02PM |
| Credit: | DcLabs - Sponsor: Crash |
| Vulnerable: |
D-Link DI-615 0 D-Link DI-604 |
| Not Vulnerable: | |
Discussion
Dlink Di-604 IP Textfield Size Cross-Site Scripting and Denial of Service Vulnerabilities
Dlink Di-604 products are prone to a cross-site scripting and a denial-of-service vulnerability because the devices fail to properly handle user-supplied input.
An attacker may leverage these issues to cause denial-of-service conditions or to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site.
Dlink Di-604 products are prone to a cross-site scripting and a denial-of-service vulnerability because the devices fail to properly handle user-supplied input.
An attacker may leverage these issues to cause denial-of-service conditions or to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site.
Exploit / POC
Dlink Di-604 IP Textfield Size Cross-Site Scripting and Denial of Service Vulnerabilities
To exploit the cross-site scripting issues, an attacker must entice an unsuspecting user to follow a malicious URI. To exploit the denial-of-service issues, attackers can use readily available tools.
To exploit the cross-site scripting issues, an attacker must entice an unsuspecting user to follow a malicious URI. To exploit the denial-of-service issues, attackers can use readily available tools.
Solution / Fix
Dlink Di-604 IP Textfield Size Cross-Site Scripting and Denial of Service Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Dlink Di-604 IP Textfield Size Cross-Site Scripting and Denial of Service Vulnerabilities
References:
References: