medium6.4Public exploit code
CVE-2003-1427
Directory traversal vulnerability in the web configuration interface in Netgear FM114P 1.4 allows remote attackers to read arbitrary files, such as the netgear…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Netgear FM114P Wireless Firewall - File Disclosure2003-02-10 · remote · hardware · Verified
Impact
Directory traversal vulnerability in the web configuration interface in Netgear FM114P 1.4 allows remote attackers to read arbitrary files, such as the netgear.cfg configuration file, via a hex-encoded (%2e%2e%2f) ../ (dot dot slash) in the port parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Fm114p | Version 1.4_beta_release_17 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/311160
- http://www.securityfocus.com/bid/6807
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11279
- http://www.securityfocus.com/archive/1/311160
- http://www.securityfocus.com/bid/6807
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11279