D-Link DIR-513 Buffer Overflow Vulnerability in WAN PPTP Form

A critical buffer overflow vulnerability has been identified in the D-Link DIR-513 router, version 1.0. The issue arises in the file '/goform/formSetWanPPTP', where the 'curTime' argument can be manipulated, leading to a buffer overflow. This vulnerability can be exploited remotely and affects products that are no longer supported by the manufacturer.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/formSetWanPPTP' with a crafted 'curTime' argument that exceeds the buffer size, causing a buffer overflow. This can be done using a web browser or a tool like cURL, by specifying the appropriate headers and payload.