CVE-2009-2765

Published: 14/08/2009 Updated: 19/09/2017

CVSS v2 Base Score: 8.3 | Impact Score: 10 | Exploitability Score: 6.5

VMScore: 845

Vector: AV:A/AC:L/Au:N/C:C/I:C/A:C

httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote malicious users to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI.

Vulnerable Product	Search on Vulmon	Subscribe to Product
dd-wrt dd-wrt

This is a remote root vulnerability in DD-WRT's httpd server The bug exists at the latest 24 sp1 version of the firmware The problem is due to many bugs and bad software design decisions Here is part of httpdc: 859 if (containsstring(file, "cgi-bin")) { 860 861 auth_fail = 0; 862 if (!do_auth 86 ...

## # $Id$ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote include Ms ...

## # $Id: ddwrt_cgibin_execrb 9719 2010-07-07 17:38:59Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' clas ...

CWE-20 http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173 http://www.osvdb.org/55990 http://isc.sans.org/diary.html?storyid=6853 http://www.securityfocus.com/bid/35742 http://securitytracker.com/id?1022596 http://www.theregister.co.uk/2009/07/21/critical_ddwrt_router_vuln/http://metasploit.com/svn/framework3/trunk/modules/exploits/linux/http/ddwrt_cgibin_exec.rb http://www.dd-wrt.com/http://www.exploit-db.com/exploits/9209 https://nvd.nist.gov https://www.exploit-db.com/exploits/9209/

CVE-2009-2765

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect