CVE-2009-2765

概要

参考情報

• isc.sans.org/diary.html · Patch
• metasploit.com/svn/framework3/trunk/modules/exploits/linux/http/ddwrt_cgibin_exec.rb · Exploit
• securitytracker.com/id
• dd-wrt.com · Patch
• dd-wrt.com/phpBB2/viewtopic.php · Exploit
• exploit-db.com/exploits/9209
• osvdb.org/55990
• securityfocus.com/bid/35742 · Exploit
• theregister.co.uk/2009/07/21/critical_ddwrt_router_vuln

dd-wrt のその他の脆弱性

• CVE-2009-2766高 7.5httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which al…
• CVE-2008-6975中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication…
• CVE-2008-6974中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the au…