D-Link DWR-M961 Stack-Based Buffer Overflow Vulnerability in Authorization Interface

A critical stack-based buffer overflow vulnerability has been identified in the D-Link DWR-M961 router, specifically in version 1.1.36. The issue arises within the Authorization Interface, in the file '/boafrm/formStaticDHCP'. The vulnerability is triggered by manipulating the 'Hostname' argument, leading to a stack-based buffer overflow that can be exploited remotely.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can potentially be used to execute arbitrary code or disrupt the device's normal functioning.

Reproduction

To reproduce this vulnerability, send a crafted request to the '/boafrm/formStaticDHCP' endpoint, including a 'Hostname' argument that exceeds the expected length. This will trigger the stack-based buffer overflow condition.

Remediation

Upgrade the router's firmware to version 1.1.49 to address this vulnerability.