← back
CVE-2008-4133

CVE-2008-4133

EPSS 4.2%
The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/32336unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0133.htmlhttp://secunia.com/advisories/31767http://securityreason.com/securityalert/4276https://exchange.xforce.ibmcloud.com/vulnerabilities/44961http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3808http://www.securityfocus.com/archive/1/496072/100/0/threadedhttp://www.securityfocus.com/bid/31050http://www.securitytracker.com/id?1020825