30 matches found
EUVD-2009-2252
Malware in sbrugna...
EUVD-2009-2253
Malware in sbrugna...
EUVD-2009-2254
Malware in sbrugna...
CVE-2009-2256
The administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to cause a denial of service web outage via an HTTP POST request to cgi-bin/firmwarecfg...
CVE-2009-2257
The administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to bypass authentication via a direct request to 1 gateway/commands/saveconfig.html, and 2 stattbl.htm, 3 modemmenu.htm, 4 onload.htm, 5 form.css, 6 utility.js, and possibly 7 indextop.htm in html/...
CVE-2009-2258
Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to list arbitrary directories via a .. dot dot in the nextpage parameter...
Design/Logic Flaw
The administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to cause a denial of service web outage via an HTTP POST request to cgi-bin/firmwarecfg...
Authentication flaw
The administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to bypass authentication via a direct request to 1 gateway/commands/saveconfig.html, and 2 stattbl.htm, 3 modemmenu.htm, 4 onload.htm, 5 form.css, 6 utility.js, and possibly 7 indextop.htm in html/...
Directory traversal
Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to list arbitrary directories via a .. dot dot in the nextpage parameter...
CVE-2009-2256
The CVE-2009-2256 entry concerns Netgear DG632 routers running firmware 3.4.0_ap. Affected component: the administrative web interface. Root cause: handling of an HTTP POST to cgi-bin/firmwarecfg allows remote attackers to trigger a denial of service (web outage). Impact: availability loss of the...
CVE-2009-2258
The CVE-2009-2258 issue affects Netgear DG632 devices running firmware 3.4.0_ap, where a directory traversal vulnerability in the admin web interface’s cgi-bin/webcm allows remote attackers to list arbitrary directories by injecting .. in the nextpage parameter. This is a remote, unauthenticated ...
CVE-2009-2257
The administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to bypass authentication via a direct request to 1 gateway/commands/saveconfig.html, and 2 stattbl.htm, 3 modemmenu.htm, 4 onload.htm, 5 form.css, 6 utility.js, and possibly 7 indextop.htm in html/...
CVE-2009-2258
Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to list arbitrary directories via a .. dot dot in the nextpage parameter...
CVE-2009-2256
The administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to cause a denial of service web outage via an HTTP POST request to cgi-bin/firmwarecfg...
CVE-2009-2257
The CVE concerns Netgear DG632, firmware 3.4.0_ap. The administrative web interface can be bypassed by direct requests to several HTML assets (gateway/commands/saveconfig.html, stattbl.htm, modemmenu.htm, onload.htm, form.css, utility.js, and possibly indextop.htm in html/), enabling remote authe...
CVE-2009-2256: Improper Input Validation
The administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to cause a denial of service web outage via an HTTP POST request to cgi-bin/firmwarecfg...
CVE-2009-2258: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to list arbitrary directories via a .. dot dot in the nextpage parameter...
CVE-2009-2257: Improper Authentication
The administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to bypass authentication via a direct request to 1 gateway/commands/saveconfig.html, and 2 stattbl.htm, 3 modemmenu.htm, 4 onload.htm, 5 form.css, 6 utility.js, and possibly 7 indextop.htm in html/...
Netgear DG632 Router Authentication Bypass Vulnerability
Product Name: Netgear DG632 Router Vendor: http://www.netgear.com Date: 15 June, 2009 Author: [email protected] [email protected] Original URL: http://www.tomneaves.co.uk/NetgearDG632AuthenticationBypass.txt Discovered: 18 November, 2006 Disclosed: 15 June, 2009 I. DESCRIPTION The Netgear DG6...
