D-Link DI-8003 Buffer Overflow Vulnerability in the url_member.asp Endpoint

A buffer overflow vulnerability has been identified in the D-Link DI-8003 router, specifically in the firmware version 16.07.26A1. The vulnerability arises from improper handling of the name parameter in the url_member.asp endpoint, which can be exploited to cause a stack-based buffer overflow, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, resulting in a denial-of-service condition.

Reproduction

To reproduce this vulnerability, send a request to the /url_member.asp endpoint with an excessively long name parameter. This will trigger the buffer overflow by exceeding the allocated memory space for the parameter, causing a stack-based overflow.