Showing 1 - 2 of 2

CVE-2017-6334

Status Candidate

Overview

dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP POST request, a different vulnerability than CVE-2017-6077.

Related Files

Netgear DGN2200 dnslookup.cgi Command Injection: Posted Jun 24, 2017; Authored by SivertPL, thecarterb | Site metasploit.com; This Metasploit module exploits a command injection vulnerability in NETGEAR DGN2200v1/v2/v3/v4 routers by sending a specially crafted post request with valid login details.; tags | exploit; advisories | CVE-2017-6334; SHA-256 | 1fec4e5211012852df5a0c5522fb686d79ac9dee14476e919180c9eb884159d8; Download | Favorite | View

Netgear DGN2201 v1/v2/v3/v4 dnslookup.cgi Remote Command Execution: Posted Feb 26, 2017; Authored by SivertPL; Netgear DGN2200 versions 1, 2, 3, and 4 suffer from a non-administrative authenticated remote command execution vulnerability via dnslookup.cgi.; tags | exploit, remote, cgi; advisories | CVE-2017-6334; SHA-256 | 99c9ae06ec4806b61f395324ca46e61fb502eec55131c4cf088ceadb4d9636e2; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 308 files
Ubuntu 77 files
Debian 18 files
Ahmet Umit Bayram 10 files
Apple 10 files
Jann Horn 4 files
tmrswrr 4 files
malvuln 4 files
Google Security Research 4 files
Furkan Eren Tetik 4 files

File Archives

Systems

AIX (429)
Apple (2,089)
BSD (376)
CentOS (58)
Cisco (1,927)
Debian (7,056)
Fedora (1,693)
FreeBSD (1,246)
Gentoo (4,500)
HPUX (880)
iOS (375)
iPhone (108)
IRIX (220)
Juniper (69)
Linux (49,990)
Mac OS X (691)
Mandriva (3,105)
NetBSD (256)
OpenBSD (488)
RedHat (16,053)
Slackware (941)
Solaris (1,611)
SUSE (1,444)
Ubuntu (9,568)
UNIX (9,416)
UnixWare (187)
Windows (6,662)
Other

CVE-2017-6334

Overview

Related Files

File Archive:

June 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems