CVE-2013-6027 — HIGH (8.5) — White Hats Nepal

Vulnerability Description

Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long set/runtime/diagnostic/pingIp parameter to Tools/tools_misc.xgi.

CVSS Score

8.5

HIGH

AV:N/AC:M/Au:S/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Dlink	Dir-100	-

Related Weaknesses (CWE)

CWE-119

References

http://pastebin.com/raw.php?i=vbiG42VDExploit
http://www.kb.cert.org/vuls/id/248083US Government Resource
http://pastebin.com/raw.php?i=vbiG42VDExploit
http://www.kb.cert.org/vuls/id/248083US Government Resource

FAQ

What is CVE-2013-6027?

CVE-2013-6027 is a vulnerability with a CVSS score of 8.5 (HIGH). Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long set/ru...

How severe is CVE-2013-6027?

CVE-2013-6027 has been rated HIGH with a CVSS base score of 8.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-6027?

Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-100.