Marc Ruef has reported a vulnerability in D-Link DIR-100 Ethernet Broadband Router, which can be exploited by malicious people to bypass the URL filtering functionality.

The vulnerability is caused due to an error within the parental control when handling certain requested URLs and can be exploited to access forbidden websites via long, specially crafted requests.

The vulnerability is reported in all firmware versions up to version 1.12. Other versions may also be affected.

Solution
Do not rely on the filtering mechanism. Use another product to restrict network access.

Provided and/or discovered by
Marc Ruef, scip AG

Changelog
Further details available in Customer Area

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064303.html

Deep Links
Links available in Customer Area