CVE-2004-2749

EPSS 2.3%

Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other product lines, allows remote attackers to read arbitrary files via a .. (dot dot) in the return parameter. NOTE: this issue was reported as XSS, but this might be a terminology error.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/23562unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://archives.neohapsis.com/archives/bugtraq/2004-01/0179.html http://secunia.com/advisories/10666 http://securitytracker.com/id?1008798 https://exchange.xforce.ibmcloud.com/vulnerabilities/14894 http://www.osvdb.org/3683 http://www.securityfocus.com/bid/9463