D-Link DI-8003 Buffer Overflow Vulnerability in pppoe_list_opt.asp Endpoint

A buffer overflow vulnerability has been identified in the D-Link DI-8003 router, specifically in the firmware version 16.07.26A1. The issue arises in the pppoe_list_opt.asp endpoint, where the s parameter can be manipulated. An attacker can send a crafted request with an excessively large value for the s parameter, triggering a buffer overflow condition.

Impact

Exploitation of this vulnerability leads to a buffer overflow condition, which can commonly result in arbitrary code execution or causing the device to crash, leading to a denial-of-service situation.