15 lines
No EOL
764 B
Text
15 lines
No EOL
764 B
Text
source: https://www.securityfocus.com/bid/36076/info
|
|
|
|
The NetGear WNR2000 is prone to multiple remote information-disclosure issues because it fails to restrict access to sensitive information.
|
|
|
|
A remote attacker exploit these issues to obtain sensitive information, possibly aiding in further attacks.
|
|
|
|
NOTE: Information obtained in attacks may be used in exploits targeting the vulnerability covered in BID 36094 (NetGear WNR2000 'upg_restore.cgi' Authentication Bypass Vulnerability).
|
|
|
|
The WNR2000 with firmware 1.2.0.8 is vulnerable; other firmware versions may also be affected.
|
|
|
|
The following example URIs are available:
|
|
|
|
http://www.example.com/router-info.htm
|
|
http://www.example.com/cgi-bin/router-info.htm
|
|
http://www.example.com/cgi-bin/NETGEAR_WNR2000.cfg |