CVE-2009-2765
EXPLOITEDDD-WRT < 24 - Remote Code Execution via CGI-BIN URI Shell Metacharacters
Title source: llmExploitation Summary
CVE-2009-2765 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 4 public exploits from researchers including Metasploit, gat3way, H D Moore, including a Metasploit module exploits/linux/http/ddwrt_cgibin_exec.
AI-analyzed exploit summary This Metasploit module exploits a metacharacter injection vulnerability in DD-WRT's HTTP management server, allowing unauthenticated arbitrary command execution as root via a crafted GET request to the cgi-bin endpoint.
Description
httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI.
Exploits (4)
This Metasploit module exploits a metacharacter injection vulnerability in DD-WRT's HTTP management server, allowing unauthenticated arbitrary command execution as root via a crafted GET request to the cgi-bin endpoint.
This is a detailed technical analysis of CVE-2008-6975, a remote root vulnerability in DD-WRT's httpd server due to command injection and authentication bypass. The writeup explains the root cause, including lack of metacharacter handling and execution of commands without authentication.
This Metasploit module exploits a command injection vulnerability in DD-WRT's HTTP management server (CVE-2009-2765) by injecting arbitrary commands via a malformed GET request. The payload is encoded and executed as root without authentication.
This Metasploit module exploits a metacharacter injection vulnerability in DD-WRT's HTTP management server, allowing unauthenticated remote command execution as root via a crafted GET request to the cgi-bin endpoint.