CVE-2008-4133 – D-Link DIR-100 1.12 - Security Bypass

https://notcve.org/view.php?id=CVE-2008-4133

The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters. El servicio web proxy en el D-Link DIR-100 con firmware 1.12 y anteriores no filtra de manera apropiada las peticiones web con URLs de mucha longitud, permite a atacantes remotos evitar los filtros de restricción web. • https://www.exploit-db.com/exploits/32336 http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0133.html http://secunia.com/advisories/31767 http://securityreason.com/securityalert/4276 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3808 http://www.securityfocus.com/archive/1/496072/100/0/threaded http://www.securityfocus.com/bid/31050 http://www.securitytracker.com/id?1020825 https://exchange.xforce.ibmcloud.com/vulnerabilities/44961 • CWE-20: Improper Input Validation •