CVE-2009-0680: Improper Limitation of a Pathname to a Restricted Directory

cgi-bin/welcome/VPNonly in the web interface in Netgear SSL312 allows remote attackers to cause a denial of service device crash via a crafted query string, as demonstrated using directory traversal sequences...