Published: 19/09/2008 Updated: 11/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

The web proxy service on the D-Link DIR-100 with firmware 1.12 and previous versions does not properly filter web requests with large URLs, which allows remote malicious users to bypass web restriction filters.

Vulnerable Product	Search on Vulmon	Subscribe to Product
d-link dir-100 1.12
d-link dir-100 1.02

source: wwwsecurityfocuscom/bid/31050/info D-Link DIR-100 is affected by a vulnerability that allows attackers to bypass security restrictions and access sites that are blocked by an administrator D-Link DIR-100 devices with firmware 112 are vulnerable; other versions may be affected as well wwwexamplecom/?foo=aaa() ...

CWE-20 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3808 http://www.securitytracker.com/id?1020825 http://secunia.com/advisories/31767 http://securityreason.com/securityalert/4276 http://www.securityfocus.com/bid/31050 http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0133.html https://exchange.xforce.ibmcloud.com/vulnerabilities/44961 http://www.securityfocus.com/archive/1/496072/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/32336/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-4133

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect