CVE-2009-2258

2009-06-3010:00:00

mitre

www.cve.org

AI Score

6.8

Confidence

Low

EPSS

0.004

Percentile

73.9%

JSON

Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to list arbitrary directories via a … (dot dot) in the nextpage parameter.

References

securitytracker.com/id?1022404

www.exploit-db.com/exploits/8963

www.securityfocus.com/archive/1/504312/100/0/threaded

www.tomneaves.co.uk/Netgear_DG632_Authentication_Bypass.txt