CVE-2019-9125 – An issue was discovered on D-Link DIR-878 1.12B01 devices. Because strncp

An issue was discovered on D-Link DIR-878 1.12B01 devices. Because strncpy is misused, there is a stack-based buffer overflow vulnerability that does not require authentication via the HNAP_AUTH HTTP header.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9125

Reference (s):

• https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-878/overflow1.md
• https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-878/overflow2.md