OSVDB ID: 7211

Title: D-Link SOHO Router DHCP Log XSS

Info

Disclosure
Jun 21, 2004

Discovery
Unknown

Dates

Exploit
Jun 21, 2004

Solution
Unknown

Description

 Dlink DI614+, DI704P and DI624 Xtreme G routers contain a flaw that allows a remote cross site scripting attack. This flaw exists because the firmware does not validate the supplied DHCP hostnames upon writing to the router's log. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the router, leading to a loss of integrity or availability.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

 Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround(s): Disable DHCP or do not view the router's log file.

Products

D-Link Systems, Inc.

DI614+

 2.0
2.0 3
2.0 3g
2.0f
2.10
2.18
2.30

DI704P

 2.56b5
2.56b6
2.60b2

DI624 Xtreme G

 1.28

References

Credit
  • c3rb3r - c3rb3rsympatico.ca -


Direct URL: http://osvdb.org/7211