Linux Distros Unpatched Vulnerability : CVE-2014-4927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in ACME microhttpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR- ADSL-DG834 routers allows remote attackers to cause a...

The vulnerability in the usb_device.cgi script of NETGEAR XR300 microprogramming devices allows a hacker to execute arbitrary code.

The vulnerability in the usbdevice.cgi script of NETGEAR XR300 microprogramming devices stems from the operation of the function that handles parameter readaccess. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of Netgear DGND3700 router’s built-in software relates to the disclosure of information that allows a hacker to compromise the protected data.

The vulnerability of Netgear DGND3700 router’s built-in software is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

The vulnerability of the http_d() function in Netgear WNCE3001 network adapter software allows a hacker to execute arbitrary code.

The vulnerability of the httpd function in Netgear WNCE3001 network adapter software lies in the fact that the return value of the operation is stored outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the vif_enable function in the Netgear RAX5 router’s built-in software allows a hacker to execute arbitrary commands.

The vulnerability of the vifenable function in Netgear RAX5 router’s embedded software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the apcli_do_enr_pin_wps function in the Netgear RAX5 router’s built-in software allows a hacker to execute arbitrary commands.

The vulnerability of the apclidoenrpinwps function in Netgear RAX5 router’s built-in software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of sub_41940 in Netgear EX6200 Wi-Fi router’s built-in software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of sub41940 in Netgear EX6200 Wi-Fi router’s embedded software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of NETGEAR D6400 router’s built-in software lies in the lack of measures to neutralize special elements, allowing a hacker to execute arbitrary code.

The vulnerability of NETGEAR D6400 router’s built-in software lies in the lack of measures to neutralize specific components. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability in the usb_device.cgi script of NETGEAR XR300 microprogramming devices allows a hacker to execute arbitrary code.

The vulnerability in the usbdevice.cgi script of NETGEAR XR300 microprogramming devices stems from the issue where the operation exceeds the buffer boundaries during the processing of the sharename parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability in the usb_device.cgi script of NETGEAR XR300 microprogramming devices allows a hacker to execute arbitrary code.

The vulnerability in the usbdevice.cgi script of NETGEAR XR300 microprogramming devices stems from the operation of the function that handles parameters for the usbfolder. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the sub_54340() function in Netgear EX6200 router microprogramming software allows a hacker to disclose protected information.

The vulnerability of the sub54340 function in Netgear EX6200 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the apcli_cancel_wps function in the Netgear RAX5 router’s built-in software allows a hacker to execute arbitrary commands.

The vulnerability of the apclicancelwps function in the Netgear RAX5 router’s built-in software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the reset_wifi function in Netgear RAX5’s built-in software allows a hacker to execute arbitrary commands.

The vulnerability of the resetwifi function in Netgear RAX5 router’s built-in software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of sub_47F7C in Netgear EX6200 Wi-Fi router’s built-in software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of sub47F7C in Netgear EX6200 Wi-Fi router’s embedded software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Netgear DGN2200B Code Execution Vulnerability

The Netgear DGN2200B is a wireless router from Netgear USA. A code execution vulnerability exists in Netgear DGN2200B 1.0.0.36 and earlier versions, which stems from insufficient pppoe.cgi endpoint input cleanup, and can be exploited by an attacker to potentially cause remote code execution...

Netgear SPH200D Directory Traversal Vulnerability

The Netgear SPH200D is a wireless Internet phone from Netgear USA. The Netgear SPH200D suffers from a directory traversal vulnerability that can be exploited by an attacker to view arbitrary files on the system by sending a crafted URL request...

Netgear DGN1000B Code Execution Vulnerability

The Netgear DGN1000B is a wireless router from the American company Netgear. A code execution vulnerability exists in the Netgear DGN1000B version 1.1.00.24 and 1.1.00.45, which stems from insufficient cleanup of setup.cgi endpoint inputs, and can be exploited by an attacker to potentially cause...

The vulnerability of the cmd_wireless() function in Netgear’s JWNR2000v2 router software allows a hacker to execute arbitrary commands.

The vulnerability of the cmdwireless function in Netgear JWNR2000v2 router microprogramming software is related to the lack of data cleaning measures at the control level when processing the host parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

The vulnerability in the pppoe.cgi script of Netgear DGN2200B router software allows a hacker to execute arbitrary commands.

The vulnerability of the pppoe.cgi script of the Netgear DGN2200B router operating system is related to the failure to take measures to neutralize special elements used in the operating system when processing the pppoeusername parameter. Exploiting this vulnerability allows a remote attacker to...

The vulnerability in the setup.cgi script of Netgear DGN1000B router software allows a hacker to execute arbitrary commands.

The vulnerability in the setup.cgi script of Netgear DGN1000B router microprogramming software relates to the failure to take measures to neutralize special elements used in the operating system’s command for handling the TimeToLive parameter. Exploiting this vulnerability allows a remote attacke...