Asmax Ar-804gu Router 'script' Remote Arbitrary Shell Command Injection Vulnerability

Bugtraq ID:	35153
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 01 2009 12:00AM
Updated:	Jun 01 2009 06:39PM
Credit:	Michal Sajdak
Vulnerable:	Asmax Ar-804gu Router 66.34.1
Not Vulnerable:

Asmax Ar-804gu Router 'script' Remote Arbitrary Shell Command Injection Vulnerability

Asmax Ar-804gu router is prone to a remote command-injection vulnerability because it fails to adequately restrict access to certain features.

Remote attackers can exploit this issue to execute arbitrary shell commands with superuser privileges, which may facilitate a complete compromise of the affected device.

Asmax Ar-804gu with firmware version 66.34.1 is affected; other versions may also be vulnerable.

Asmax Ar-804gu Router 'script' Remote Arbitrary Shell Command Injection Vulnerability

To exploit this issue, attackers can use a browser or readily available network utilities.

The following example URI is available:

http://www.example.com/cgi-bin/script?system%20whoami

Asmax Ar-804gu Router 'script' Remote Arbitrary Shell Command Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Asmax Ar-804gu Router 'script' Remote Arbitrary Shell Command Injection Vulnerability

References:

• ASMAX AR 804 gu compromise (Michal Sajdak)
  
• Vendor Homepage (Asmax)
  
• ASMAX AR 804 gu Web Management Console Arbitrary Shell Command Injection Vulnera ([email protected])