EUVD-2007-0359

Malware in sbrugna...

AVM IGD CTRL Service directory traversal

HTTP directory traversal with TCP/49001 UPNP port...

avm-traversal.txt

Description The "AVM IGD CTRL Service", a Universal Plug and Play UPNP service for windows, which is part of the software package "Fritz!DSL Software 02.02.29" provides the possibility to read any file on the windows system partition for any user - no matter how much restricted rights the user...

Directory traversal

Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C URL-encoded dot dot backslash sequences in a URI requested from the AR7 webserver...

CVE-2007-0357

Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C URL-encoded dot dot backslash sequences in a URI requested from the AR7 webserver...

CVE-2007-0357

CVE-2007-0357 is a directory traversal vulnerability in the AVM IGD CTRL Service of Fritz!DSL 02.02.29. The issue allows remote attackers to read arbitrary files via URL-encoded dot-dot backslash sequences (..%5C) in a URI requested from the AR7 webserver. Affected component is the AVM IGD CTRL S...