Cormac315

**Name of the Vulnerable Software and Affected Versions** Shibby Tomato version 1.28 RT-N5x MIPSR2 Build 124 **Description** A remote out-of-bounds write can occur due to a flaw in the `setup conntrack()` function within the `/sbin/rc` file. This issue is triggered by manipulating the `ct tcp timeout` argument. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Shibby Tomato version 1.28 **Description** A stack-based buffer overflow exists in the Scheduler Name Handler component. The issue occurs within the `sub 42537C()` function when the `a1` argument is manipulated, allowing a remote authenticated attacker with admin-panel access to corrupt the stack and potentially execute arbitrary code on the router. **Recommendations** Migrate to FreshTomato. Restrict access to the router admin interface.

A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the function sub 40BB50 of the file /proc/webmon recent domains. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This project is superseded by FreshTomato.

**Name of the Vulnerable Software and Affected Versions** Shibby Tomato versions prior to 1.28.0000 **Description** A stack-based buffer overflow exists in the DNS List Rendering component within the `/usr/sbin/httpd` file. The issue occurs in the `sub 407220()` function and can be exploited remotely. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** Update to a version newer than 1.28.0000. As a temporary workaround, restrict access to the DNS List Rendering component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Shibby Tomato version 1.28 **Description** A stack-based buffer overflow can be triggered remotely via the `get ups field()` function within the 'tomatodata.cgi' file. This occurs when the `Date` argument is manipulated. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Shibby Tomato version 1.28 **Description** A stack-based buffer overflow occurs in the `sub 90F0()` function within the 'multimon.cgi' file. This issue allows a remote attacker to manipulate the system via a buffer overflow, which happens when a program writes more data to a fixed-length block of memory (the stack) than it is allocated to hold. **Recommendations** As a temporary workaround, restrict access to the 'multimon.cgi' file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Shibby Tomato versions prior to 1.29 **Description** A stack-based buffer overflow exists in the UPS Service component within the `sub 9068()` function of the `tomatoups.cgi` file. This issue allows a remote attacker to trigger the overflow through manipulation of the service. A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.