CVE-2008-4133

D-Link DIR-100 - Web Proxy Filter Bypass via Large URL

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-4133. PoCs published by Marc Ruef.

AI-analyzed exploit summary The provided text describes a vulnerability in D-Link DIR-100 devices (firmware 1.12) that allows attackers to bypass security restrictions and access blocked sites. However, no actual exploit code is included, only a reference to a URL pattern.

Description

The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Marc Ruef · textremotehardware
https://www.exploit-db.com/exploits/32336

The provided text describes a vulnerability in D-Link DIR-100 devices (firmware 1.12) that allows attackers to bypass security restrictions and access blocked sites. However, no actual exploit code is included, only a reference to a URL pattern.

Classification
Writeup 80%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Theoretical
Target: D-Link DIR-100 firmware 1.12
No auth needed
Prerequisites: Network access to the vulnerable device
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/31050
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31767
Third Party Advisory mailing-list x_refsource_fulldisc
http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0133.html
Various Sources x_refsource_misc
http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3808
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/4276
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/44961
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1020825
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/496072/100/0/threaded

Scores

EPSS 0.0425
EPSS Percentile 89.8%

Details

CWE
CWE-20
Status published
Products (2)
d-link/dir-100 1.02
d-link/dir-100 1.12
Published Sep 19, 2008
Tracked Since Feb 18, 2026