D-Link DIR-513 Buffer Overflow Vulnerability in formTcpipSetup

A stack buffer overflow vulnerability has been identified in the D-Link DIR-513 router, specifically in the firmware version A1FW110. The issue arises in the function formTcpipSetup, where the curTime parameter can be manipulated to overflow the buffer, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability causes a stack buffer overflow, which can commonly lead to arbitrary code execution.

Reproduction

The vulnerability can be reproduced by sending a POST request to the /goform/formTcpipSetup endpoint. The request must include a curTime parameter with a payload that exceeds the buffer's capacity, causing a stack overflow. This can be done using a web application testing tool or by crafting a manual HTTP request that exploits the buffer overflow vulnerability.