Netgear JWNR2000v2 Buffer Overflow Vulnerability in sub_4238E8

A critical buffer overflow vulnerability has been identified in the Netgear JWNR2000v2 router, specifically in version 1.0.0.11. The issue arises in the function sub_4238E8, where the 'host' argument is manipulated, leading to a buffer overflow. This vulnerability can be exploited remotely. The root cause is the use of the 'strcpy' function to copy data from the 'nvram_get' function without proper boundary checks, allowing for overflow conditions.

Impact

Exploitation of this vulnerability allows for a buffer overflow, which can potentially be used to execute arbitrary code or cause a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a crafted request that includes a 'host' argument. The 'strcpy' function will copy the data into a buffer without checking the length, leading to a buffer overflow.