Belkin F9K1122 Stack-Based Buffer Overflow Vulnerability in Web Interface

A critical stack-based buffer overflow vulnerability has been identified in the Belkin F9K1122 router running firmware version 1.00.33. The issue arises in the web interface, specifically within the 'formPPTPSetup' function of the '/goform/formPPTPSetup' file. The vulnerability is triggered by manipulating the 'pptpUserName' argument, allowing remote attackers to execute arbitrary code by causing the router to crash.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, allowing for arbitrary code execution on the affected device.

Reproduction

To reproduce this vulnerability, send a crafted request to the '/goform/formPPTPSetup' endpoint, including an excessively long 'pptpUserName' parameter. This will cause a stack-based buffer overflow, potentially allowing for arbitrary code execution.