Secunia

Two vulnerabilities have been reported in Dreambox DM500 Series, which can be exploited by malicious people to cause a DoS (Denial of Service) and disclose sensitive information.

1) The vulnerability is caused due to an error within the web interface when processing overly long requests. This can be exploited to cause a DoS by sending malicious requests to a vulnerable device.

2) Input passed to the application via the URL is not properly verified before being used to display files. This can be exploited to disclose the contents of arbitrary files via directory traversal attacks (e.g. credentials and paid channel keys).

Solution
Use a firewall or proxy to filter malicious requests.

Provided and/or discovered by
1) Marc Ruef, scip AG.
2) Gjoko Krstic, Zero Science Lab.

Changelog
Further details available in Customer Area

Original Advisory
Marc Ruef:
http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3807
http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064115.html

Zero Science Lab:
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5013.php

Deep Links
Links available in Customer Area