CVE-2011-4716
DreamBox DM800 Firmware < 1.6 - Path Traversal via File Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2011-4716. PoCs published by Todor Donev, ShellVision.
AI-analyzed exploit summary The provided text describes a local file disclosure vulnerability in DreamBox DM800 versions 1.5rc1 and prior. It lacks executable exploit code, instead offering a generic URL pattern for exploitation.
Description
Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter.
Exploits (3)
The provided text describes a local file disclosure vulnerability in DreamBox DM800 versions 1.5rc1 and prior. It lacks executable exploit code, instead offering a generic URL pattern for exploitation.
This exploit demonstrates an arbitrary file download vulnerability in DreamBox DM800 via directory traversal in the HTTP GET method. It allows attackers to access sensitive files like /etc/shadow without authentication.
This Perl script exploits a remote file disclosure vulnerability in DreamBox DM800 <= 1.5rc1 by sending a crafted HTTP request to retrieve arbitrary files from the target device. The exploit leverages a path traversal flaw in the web interface to read sensitive files like /etc/passwd.