Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 591
Alerts This Week
Warning Icon 1 591

D-Link Router: Buffer Overflow Risk Due to UPnP M-SEARCH Request

Calendar Jul 17, 2006 • User Avatar Anthony Pell
1 min read
General Esm H446
Topics%20covered

Topics Covered

security advisory buffer overflow network exploitation d-link router upnp service
eEye Digital Security has reported a vulnerability in various D-Link routers, which can be exploited by malicious people to compromise a vulnerable network device.

The vulnerability is caused due to a boundary error in the UPnP service when processing "M-SEARCH" requests. This can be exploited to cause a stack-based buffer overflow by sending an "M-SEARCH" request with an overly long string (about 800 bytes) to port 1900/UDP.

The link for this article located at Secunia.com is no longer available.