ID de Prueba:	1.3.6.1.4.1.25623.1.0.803730
Categoría:	Web application abuses
Título:	D-Link DIR-645 Router Multiple Vulnerabilities (Aug 2013) - Active Check
Resumen:	D-Link DIR-645 Router is prone to multiple vulnerabilities.
Descripción:	Summary: D-Link DIR-645 Router is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - Buffer overflow in post_login.xml, hedwig.cgi and authentication.cgi when handling specially crafted requests. - Input passed to the 'deviceid' parameter in bind.php, 'RESULT' parameter in info.php and 'receiver' parameter in bsc_sms_send.php is not properly sanitised before being returned to the user. Vulnerability Impact: Successful exploitation will allow attacker to cause denial of service or execute arbitrary HTML and script code in a user's browser session in context of an affected website. Affected Software/OS: D-Link DIR-645 firmware version 1.04 and prior. Solution: Update to version 1.04B11 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-7389 BugTraq ID: 61579 http://www.securityfocus.com/bid/61579 http://roberto.greyhats.it/advisories/20130801-dlink-dir645.txt http://osvdb.org/show/osvdb/95910 http://osvdb.org/show/osvdb/95952 http://osvdb.org/show/osvdb/95953
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.