PT-2009-5129 · New Media Net Gmbh · Dd-Wrt

Leka Vecher · Publicado 2009-08-14 · Atualizado 2025-12-01 · CVE-2009-2765

Positive Technologies (AI Summary)

CVSS v2.0

8.3

Alta

Vetor base

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DD-WRT versions prior to build 12533

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a "cgi-bin/" URI. This is due to a problem in the httpd.c in httpd in the management GUI.

Recommendations For DD-WRT versions prior to build 12533, update to a version after build 12533 to resolve the issue. As a temporary workaround, consider restricting access to the cgi-bin directory to minimize the risk of exploitation.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2009-2765

Produtos afetados

Dd-Wrt

Referências · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ddwrt_cgibin_exec.rb · Exploit
• 🔥 http://securityfocus.com/bid/35742 · Exploit
• 🔥 https://exploit-db.com/exploits/10030 · Exploit
• 🔥 http://exploit-db.com/exploits/9209 · Exploit
• 🔥 http://metasploit.com/svn/framework3/trunk/modules/exploits/linux/http/ddwrt_cgibin_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16856 · Exploit
• 🔥 https://exploit-db.com/exploits/9209 · Exploit
• 🔥 http://dd-wrt.com/phpBB2/viewtopic.php?t=55173 · Exploit
• http://isc.sans.org/diary.html?storyid=6853 · Correção
• http://theregister.co.uk/2009/07/21/critical_ddwrt_router_vuln · Nota
• http://osvdb.org/55990 · Nota
• http://dd-wrt.com · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2765 · Nota
• https://t.me/true_secator/7674 · Publicação no Telegram
• https://t.me/purp_sec/1309 · Publicação no Telegram