CVE-2004-2749 Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other product lines, allows remote attackers to read arbitrary files via a .. (dot dot) in...
MediumCVSS 4.3
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other product lines, allows remote attackers to read arbitrary files via a .. (dot dot) in the return parameter. NOTE: this issue was reported as XSS, but this might be a terminology error.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 2wire homeportal | = 100s | No fix listed |
| 2wire homeportal | = 100w | No fix listed |
| 2wire homeportal | = 1000 | No fix listed |
| 2wire homeportal | = 1000s | No fix listed |
| 2wire homeportal | = 1000sw | No fix listed |
| 2wire homeportal | = 1000w | No fix listed |
| 2wire homeportal | = 1500w | No fix listed |
References
- 20040120 2Wire-Gateway Cross Site Scripting and Directory Transversal bug in SSL Form exploit mailing-list
- 10666 third-party-advisory
- 1008798 vdb-entry
- 3683 exploit vdb-entry
- 9463 exploit vdb-entry
- homeportal-wralogin-directory-traversal(14894) vdb-entry