D-Link Wireless N300 cloud router CAPTCHA Buffer Overflow Vulnerability

Release date:
Updated on: 2012-11-02

Affected Systems:
D-Link Wireless N300 Cloud Router (DIR-605L)
Description:
--------------------------------------------------------------------------------
D-Link Wireless N300 Cloud Router is a Wireless Router of the DIR-615 series.

D-Link Wireless N300 Cloud Router v1.10, 1.12, and other versions have errors on the Web server when processing CAPTCHA data. This vulnerability can cause stack buffer overflow through specially crafted http post requests.

<* Source: Craig

Link: http://secunia.com/advisories/51075/
Http://www.devttys0.com/2012/10/exploiting-a-mips-stack-overflow/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

D-Link
------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.dlink.com/