CVE-2009-2765

This Metasploit module exploits a metacharacter injection vulnerability in DD-WRT's HTTP management server, allowing unauthenticated arbitrary command execution as root via a crafted GET request to the cgi-bin endpoint.

This is a detailed technical analysis of CVE-2008-6975, a remote root vulnerability in DD-WRT's httpd server due to command injection and authentication bypass. The writeup explains the root cause, including lack of metacharacter handling and execution of commands without authentication.

This Metasploit module exploits a command injection vulnerability in DD-WRT's HTTP management server (CVE-2009-2765) by injecting arbitrary commands via a malformed GET request. The payload is encoded and executed as root without authentication.

This Metasploit module exploits a metacharacter injection vulnerability in DD-WRT's HTTP management server, allowing unauthenticated remote command execution as root via a crafted GET request to the cgi-bin endpoint.