D-Link DIR-825 Stack-Based Buffer Overflow Vulnerability via HTTP POST Requests

A critical stack-based buffer overflow vulnerability has been identified in the D-Link DIR-825 router, specifically in version 2.03. This vulnerability arises in the 'do_file' function of the HTTP POST request handler, where improper input handling allows for buffer overflow conditions. The issue can be exploited remotely, and a public proof-of-concept exploit is available.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

The vulnerability can be reproduced by sending a specially crafted HTTP POST request to the router. The 'do_file' function will process the request, and the lack of proper bounds checking will allow the buffer overflow to occur.