Showing 1 - 2 of 2

CVE-2017-6334

Status Candidate

Overview

dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP POST request, a different vulnerability than CVE-2017-6077.

Related Files

Netgear DGN2200 dnslookup.cgi Command Injection: Posted Jun 24, 2017; Authored by SivertPL, thecarterb | Site metasploit.com; This Metasploit module exploits a command injection vulnerability in NETGEAR DGN2200v1/v2/v3/v4 routers by sending a specially crafted post request with valid login details.; tags | exploit; advisories | CVE-2017-6334; SHA-256 | 1fec4e5211012852df5a0c5522fb686d79ac9dee14476e919180c9eb884159d8; Download | Favorite | View

Netgear DGN2201 v1/v2/v3/v4 dnslookup.cgi Remote Command Execution: Posted Feb 26, 2017; Authored by SivertPL; Netgear DGN2200 versions 1, 2, 3, and 4 suffer from a non-administrative authenticated remote command execution vulnerability via dnslookup.cgi.; tags | exploit, remote, cgi; advisories | CVE-2017-6334; SHA-256 | 99c9ae06ec4806b61f395324ca46e61fb502eec55131c4cf088ceadb4d9636e2; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 228 files
Ubuntu 89 files
Gentoo 31 files
Debian 22 files
tmrswrr 10 files
Sina Kheirkhah 7 files
bRpsd 4 files
Rodolfo Tavares 4 files
nu11secur1ty 3 files
Google Security Research 3 files

File Archives

Systems

AIX (429)
Apple (2,090)
BSD (376)
CentOS (58)
Cisco (1,927)
Debian (7,079)
Fedora (1,693)
FreeBSD (1,246)
Gentoo (4,531)
HPUX (880)
iOS (376)
iPhone (108)
IRIX (220)
Juniper (69)
Linux (50,380)
Mac OS X (691)
Mandriva (3,105)
NetBSD (256)
OpenBSD (489)
RedHat (16,289)
Slackware (941)
Solaris (1,611)
SUSE (1,444)
Ubuntu (9,663)
UNIX (9,426)
UnixWare (187)
Windows (6,666)
Other

CVE-2017-6334

Overview

Related Files

File Archive:

July 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems