medium4.3Public exploit code
CVE-2004-2749
Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other product lines, allows remote attackers to r…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- 2WIRE HomePortal Series - Directory Traversal2004-01-20 · remote · windows · Verified
Impact
Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other product lines, allows remote attackers to read arbitrary files via a .. (dot dot) in the return parameter. NOTE: this issue was reported as XSS, but this might be a terminology error.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 2wire | Homeportal | Versions 100s, 100w, 1000, 1000s, 1000sw, 1000w |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2004-01/0179.html
- http://secunia.com/advisories/10666
- http://securitytracker.com/id?1008798
- http://www.osvdb.org/3683
- http://www.securityfocus.com/bid/9463
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14894
- http://archives.neohapsis.com/archives/bugtraq/2004-01/0179.html
- http://secunia.com/advisories/10666
- http://securitytracker.com/id?1008798
- http://www.osvdb.org/3683
- http://www.securityfocus.com/bid/9463
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14894