Showing 1 - 2 of 2

CVE-2017-6334

Status Candidate

Overview

dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP POST request, a different vulnerability than CVE-2017-6077.

Related Files

Netgear DGN2200 dnslookup.cgi Command Injection: Posted Jun 24, 2017; Authored by SivertPL, thecarterb | Site metasploit.com; This Metasploit module exploits a command injection vulnerability in NETGEAR DGN2200v1/v2/v3/v4 routers by sending a specially crafted post request with valid login details.; tags | exploit; advisories | CVE-2017-6334; SHA-256 | 1fec4e5211012852df5a0c5522fb686d79ac9dee14476e919180c9eb884159d8; Download | Favorite | View

Netgear DGN2201 v1/v2/v3/v4 dnslookup.cgi Remote Command Execution: Posted Feb 26, 2017; Authored by SivertPL; Netgear DGN2200 versions 1, 2, 3, and 4 suffer from a non-administrative authenticated remote command execution vulnerability via dnslookup.cgi.; tags | exploit, remote, cgi; advisories | CVE-2017-6334; SHA-256 | 99c9ae06ec4806b61f395324ca46e61fb502eec55131c4cf088ceadb4d9636e2; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 272 files
Ubuntu 56 files
Debian 19 files
LiquidWorm 18 files
Apple 9 files
Gentoo 5 files
Google Security Research 3 files
Chokri Hammedi 3 files
Alter Prime 3 files
Valentin Lobstein 2 files

File Archives

Systems

AIX (430)
Apple (2,126)
BSD (378)
CentOS (61)
Cisco (1,954)
Debian (7,163)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,604)
HPUX (881)
iOS (393)
iPhone (108)
IRIX (220)
Juniper (71)
Linux (51,937)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (490)
RedHat (17,337)
Slackware (941)
Solaris (1,615)
SUSE (1,444)
Ubuntu (9,979)
UNIX (9,475)
UnixWare (188)
Windows (6,784)
Other

CVE-2017-6334

Overview

Related Files

File Archive:

November 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems