CVE

Id
40200  
CVE No.
CVE-2009-2765  
Status
Candidate  
Description
httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI.  
Phase
Assigned (20090814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
441875 40200 CVE-2009-2765 MILW0RM:9209  View
441876 40200 CVE-2009-2765 URL:http://www.milw0rm.com/exploits/9209  View
441877 40200 CVE-2009-2765 MISC:http://isc.sans.org/diary.html?storyid=6853  View
441878 40200 CVE-2009-2765 MISC:http://metasploit.com/svn/framework3/trunk/modules/exploits/linux/http/ddwrt_cgibin_exec.rb  View
441879 40200 CVE-2009-2765 MISC:http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173  View
441880 40200 CVE-2009-2765 MISC:http://www.theregister.co.uk/2009/07/21/critical_ddwrt_router_vuln/  View
441881 40200 CVE-2009-2765 CONFIRM:http://www.dd-wrt.com/  View
441882 40200 CVE-2009-2765 BID:35742  View
441883 40200 CVE-2009-2765 URL:http://www.securityfocus.com/bid/35742  View
441884 40200 CVE-2009-2765 OSVDB:55990  View
441885 40200 CVE-2009-2765 URL:http://www.osvdb.org/55990  View
441886 40200 CVE-2009-2765 SECTRACK:1022596  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45205 JVNDB-2009-006212 Ultrize TimeSheet の include/timesheet.php における PHP リモートファイルインクルージョンの脆弱性 Ultrize TimeSheet の include/timesheet.php には、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2009-2769 40200 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006212.html  View