NVD

Id
49990  
Name
CVE-2009-2765  
Description
httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI.  
Reject
 
CVSS Version
2  
CVSS Score
8.3  
Severity
High  
CVSS Base Score
8.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-08-14  
Modified Date
2009-08-17  
Seq
2009-2765  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
252975 49990 CVE-2009-2765 http://isc.sans.org/diary.html?storyid=6853  View
252976 49990 CVE-2009-2765 http://metasploit.com/svn/framework3/trunk/modules/exploits/linux/http/ddwrt_cgibin_exec.rb  View
252977 49990 CVE-2009-2765 1022596  View
252978 49990 CVE-2009-2765 http://www.dd-wrt.com/  View
252979 49990 CVE-2009-2765 http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173  View
252980 49990 CVE-2009-2765 9209  View
252981 49990 CVE-2009-2765 35742  View
252982 49990 CVE-2009-2765 http://www.theregister.co.uk/2009/07/21/critical_ddwrt_router_vuln/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42662 JVNDB-2009-003669 DD-WRT 24 sp1 の管理 GUI の httpd の httpd.c における任意のコマンドを実行される脆弱性 DD-WRT 24 sp1 の管理 GUI の httpd の httpd.c には、任意のコマンドを実行される脆弱性が存在します。 CVE-2009-2765 40196 CVE-2009-2765 49990 8.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003669.html 2009-07-20 2012-06-26 View