20090208 Netgear SSL312 Router - remote DoSmailing list
http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0084.html CVE-2009-0680
Netgear SSL312 Router - Denial of Service
Record summary
CVE-2009-0680 has a selected CVSS score of 7.8; EIP currently links 1 catalogued exploit.
Description
cgi-bin/welcome/VPN_only in the web interface in Netgear SSL312 allows remote attackers to cause a denial of service (device crash) via a crafted query string, as demonstrated using directory traversal sequences.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBNetgear SSL312 Router - Denial of ServiceExploitDB exploitby RembrandtNot analyzed1 file
References
733896Third-party advisory
http://secunia.com/advisories/33896 helith.net
http://www.helith.net/txt/netgear_ssl312_remote_dos.txt 33675vdb entry
http://www.securityfocus.com/bid/33675 netgear-ssl312-dos(48605)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/48605 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2009-0680 8008exploit
https://www.exploit-db.com/exploits/8008