CVE-2013-7389

This Metasploit module exploits a buffer overflow vulnerability in D-Link routers via the hedwig.cgi endpoint by sending a maliciously crafted cookie header. It achieves remote code execution by leveraging a stack-based overflow to control the instruction pointer and execute arbitrary commands.

The exploit details multiple vulnerabilities in D-Link DIR-645 firmware 1.03B08, including buffer overflows in 'post_login.xml', 'hedwig.cgi', and 'authentication.cgi', as well as XSS vulnerabilities in 'bind.php', 'info.php', and 'bsc_sms_send.php'. Proof-of-concept commands are provided for each vulnerability, demonstrating remote code execution and cross-site scripting.

This Metasploit module exploits a buffer overflow vulnerability in D-Link routers via the authentication.cgi endpoint by sending a maliciously crafted POST request with an overly long password field. It achieves remote code execution (RCE) by leveraging a cmdstager to execute arbitrary commands on the target device.