CVE-2008-4133
Title: D-Link Dir-100 Improper Input Validation
Input Validation Error
Proof Of Concept
PoC Available for CVE-2008-4133
CWE Category
CWE-20
Published Date
Sep 19, 2008
Modified Date
Jun 16, 2026
Exploit Status
Available
Score
4.3
CVSS v2.0
Exploit Probability (EPSS)
4.25%
Vulnerability Summary
CVE-2008-4133: The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters.
Impacted Vendors
Reference Links
http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0133.html
http://secunia.com/advisories/31767
http://securityreason.com/securityalert/4276
http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3808
http://www.securityfocus.com/archive/1/496072/100/0/threaded
http://www.securityfocus.com/bid/31050
http://www.securitytracker.com/id?1020825
https://exchange.xforce.ibmcloud.com/vulnerabilities/44961
http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0133.html
http://secunia.com/advisories/31767
http://securityreason.com/securityalert/4276
http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3808
http://www.securityfocus.com/archive/1/496072/100/0/threaded
http://www.securityfocus.com/bid/31050
http://www.securitytracker.com/id?1020825
https://exchange.xforce.ibmcloud.com/vulnerabilities/44961
CVSS v2.0
Source Entity
[email protected]
Severity
MEDIUM
4.3
Access Vector
N/A
Authentication
N/A
RAW VECTOR
AV:N/AC:M/Au:N/C:N/I:P/A:N
Associated Attack Patterns (CAPEC)
Total: PatternsNo specific attack patterns mapped.
Likelihood
Severity
Page /
CVE-2008-4133 Exploits & PoCs (Proof Of Concept)
Exploit-DB
https://www.exploit-db.com/exploits/32336
MODIFIED
Vulnerability data updated via NVD.
MODIFIED
Vulnerability data or affected products updated.
PUBLISHED
Vulnerability first announced in NVD.
Attack Vector Matrix
Access Vector
N/A
Complexity
N/A
Privileges
N/A
Interaction
NONE
CVSS Vector String
AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Stack
No specific products linked.