CVE-2004-2749

MITTEL 4.3CVE-2004-2749 · Published 31/12/2004 · updated 16/06/2026

Kurz gesagt

CVE-2004-2749 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in homeportal (2wire).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.3%, höher als bei 83.3% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
homeportal 2wire	`= 1000= 1000s= 1000sw= 1000w= 100s= 100w= 1500w`	No fix yet

Description

Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other product lines, allows remote attackers to read arbitrary files via a .. (dot dot) in the return parameter. NOTE: this issue was reported as XSS, but this might be a terminology error.

References

archives.neohapsis.com/archives/bugtraq/2004-01/0179.html · Exploit
secunia.com/advisories/10666
securitytracker.com/id
osvdb.org/3683 · Exploit
securityfocus.com/bid/9463 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/14894

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free