D-Link DIR-600L Buffer Overflow Vulnerability in formSetLog Function

A critical buffer overflow vulnerability has been identified in the D-Link DIR-600L router, affecting versions through 2.07B01. The issue arises in the formSetLog function, where improper handling of the 'host' argument creates a buffer overflow condition. This vulnerability can be exploited remotely and impacts products that are no longer supported by the manufacturer.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the DIR-600L router's formSetLog function, including a 'host' argument that exceeds the buffer's capacity. This can be done remotely, taking advantage of the router's exposed web interface.