NetGear WNR2000 Multiple Information Disclosure Vulnerabilities
BID:36076
Info
NetGear WNR2000 Multiple Information Disclosure Vulnerabilities
| Bugtraq ID: | 36076 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 18 2009 12:00AM |
| Updated: | Aug 21 2009 03:57PM |
| Credit: | Jean Trolleur |
| Vulnerable: |
NetGear WNR2000 Firmware 1.2.0.8 |
| Not Vulnerable: | |
Discussion
NetGear WNR2000 Multiple Information Disclosure Vulnerabilities
The NetGear WNR2000 is prone to multiple remote information-disclosure issues because it fails to restrict access to sensitive information.
A remote attacker exploit these issues to obtain sensitive information, possibly aiding in further attacks.
NOTE: Information obtained in attacks may be used in exploits targeting the vulnerability covered in BID 36094 (NetGear WNR2000 'upg_restore.cgi' Authentication Bypass Vulnerability).
The WNR2000 with firmware 1.2.0.8 is vulnerable; other firmware versions may also be affected.
The NetGear WNR2000 is prone to multiple remote information-disclosure issues because it fails to restrict access to sensitive information.
A remote attacker exploit these issues to obtain sensitive information, possibly aiding in further attacks.
NOTE: Information obtained in attacks may be used in exploits targeting the vulnerability covered in BID 36094 (NetGear WNR2000 'upg_restore.cgi' Authentication Bypass Vulnerability).
The WNR2000 with firmware 1.2.0.8 is vulnerable; other firmware versions may also be affected.
Exploit / POC
NetGear WNR2000 Multiple Information Disclosure Vulnerabilities
An attacker may exploit these issues via a web browser.
The following example URIs are available:
http://www.example.com/router-info.htm
http://www.example.com/cgi-bin/router-info.htm
http://www.example.com/cgi-bin/NETGEAR_WNR2000.cfg
An attacker may exploit these issues via a web browser.
The following example URIs are available:
http://www.example.com/router-info.htm
http://www.example.com/cgi-bin/router-info.htm
http://www.example.com/cgi-bin/NETGEAR_WNR2000.cfg
Solution / Fix
NetGear WNR2000 Multiple Information Disclosure Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
NetGear WNR2000 Multiple Information Disclosure Vulnerabilities
References:
References:
- Authentication bypass on Netgear WNR2000 (Jean Trolleur)
- Information disclosure on Netgear WNR2000 (Jean Trolleur)
- WNR2000 Homepage (Netgear)