WRT120N fprintf Stack Overflow

Re:WRT120N fprintf Stack Overflow by ksk on Wednesday February 19, 2014 @03:52AM (#7262597)

Well, its not quite that easy for a rookie as you say. Just because you can trigger a buffer overflow bug does not mean you can exploit it. Most modern processors will allow disabling execution with an IP-on-Stack test. Thats assuming you can actually control the IP... , and assuming you can actually deliver the payload in the corrupted program state and not crash the program, etc etc..

[ Parent | on HN ]

Re:WRT120N fprintf Stack Overflow by annnnd on Wednesday February 19, 2014 @05:41AM (#7262951)

Even a rookie would spot this mistake, but he would need to learn a lot before exploiting it. But with a nice target like this one... :)

[ Parent | on HN ]

Re:WRT120N fprintf Stack Overflow by ksk on Wednesday February 19, 2014 @07:26AM (#7263249)

I don't agree that this is a valuable target. AFAIK most consumer routers disable access to the web interface from outside the LAN range (by default).

[ Parent | on HN ]

Re:WRT120N fprintf Stack Overflow by pixl97 on Wednesday February 19, 2014 @10:08AM (#7263951)

And now your weakest device can CSRF remote access back on.

Most people don't take their router in to a repair shop when the get a virus on their computer.

[ Parent | on HN ]

Re:WRT120N fprintf Stack Overflow by Stamy on Wednesday February 19, 2014 @07:36AM (#7263278)

Yes but you can break almost any routers wifi password in 24hrs.

[ Parent | on HN ]

Re:WRT120N fprintf Stack Overflow by sp332 on Wednesday February 19, 2014 @11:27AM (#7264359)

But you have to be in range of the wifi to do it. This isn't something that's going to be a widespread problem.

[ Parent | on HN ]