4.3

CVE-2008-4133

The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
D-link ≫ Dir-100 Version1.02
D-link ≫ Dir-100 Version1.12
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.25% 0.898
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0133.html
http://secunia.com/advisories/31767
Vendor Advisory
http://securityreason.com/securityalert/4276
http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3808
http://www.securityfocus.com/archive/1/496072/100/0/threaded
http://www.securityfocus.com/bid/31050
http://www.securitytracker.com/id?1020825
https://exchange.xforce.ibmcloud.com/vulnerabilities/44961