CVE:CVE-2006-3687
CNNVD:CNNVD-200607-297
D-Link是台湾友讯集团所创立的网络公司，致力于局域网、宽带网、无线网、语音网及相关网络设备的研发、生产和行销。
各种有线和无线D-Link路由器的uPnP实现存在栈溢出漏洞，远程攻击者可能利用此漏洞控制设备。
如果攻击者能够向有漏洞D-Link设备的LAN接口发送有超长参数(大约800字节)的M-SEARCH请求的话，就会出发栈溢出，导致可靠的执行任意指令。攻击不会影响网络的连接性，不会显现任何迹象。在某些情况下，可能需要软重启设备，导致暂时中断连接性。
solution:Upgrade d-link di-604_broadband_router to a higher version than *; Upgrade d-link di-784 to a higher version than *; Upgrade d-link ebr-2310_ethernet_broadband_router to a higher version than *; Upgrade d-link wbr-1310_wireless_g_router to a higher version than *; Upgrade d-link wbr-2310_rangebooster_g_router to a higher version than *; Upgrade dlink di-524 to a higher version than *; Upgrade dlink di-624 to a higher version than *