D-Link DIR-600L Buffer Overflow Vulnerability in formWlSiteSurvey Function

A critical buffer overflow vulnerability has been identified in the D-Link DIR-600L router, specifically in versions through 2.07B01. The issue arises in the formWlSiteSurvey function, where improper handling of the 'host' argument allows for remote exploitation. This vulnerability affects devices that are no longer supported by the manufacturer.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the DIR-600L router's formWlSiteSurvey function, manipulating the 'host' argument to trigger the buffer overflow. This can be done remotely, without any authentication.