Tenda WH450 Stack-Based Buffer Overflow Vulnerability in PPTP Server Handler

A stack-based buffer overflow vulnerability has been identified in the Tenda WH450 router running firmware version 1.0.0.18. The issue arises in the '/goform/PPTPServer' HTTP request handler, where excessive data lengths in the 'ip1' parameter can be manipulated to cause the overflow. This vulnerability can be exploited remotely by unauthenticated attackers, potentially leading to arbitrary code execution or causing a denial-of-service condition.

Impact

Exploitation of this vulnerability allows for a stack-based buffer overflow, which can be leveraged to execute arbitrary code or cause a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a GET request to the '/goform/PPTPServer' endpoint with the 'ip1' parameter containing 300 bytes of data. This overloads the 16-byte buffer, causing the stack-based overflow. The request can be made using a web browser or a tool like 'curl' or 'Postman'.