Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to execute arbitrary code via a POST to ntp_sync.cgi with a sufficiently long parameter ntp_server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
D-Link DIR-825 缓冲区错误漏洞
Vulnerability Description
D-Link DIR-825是中国台湾友讯(D-Link)公司的一款路由器。 D-Link DIR-825 Rev.B 2.10版本中的httpd二进制文件存在缓冲区错误漏洞。攻击者可通过向ntp_sync.cgi发送带有较长参数的POST请求利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A