|
Linksys WVC11B "next_file" Parameter Arbitrary File Disclosure Vulnerability
|
|
Secunia Advisory:
|
SA11811
|
|
|
Release Date:
|
2004-06-10
|
|
Popularity:
|
4,936 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Exposure of system information
Exposure of sensitive information
|
|
Where:
|
From remote
|
|
Solution Status:
|
Unpatched
|
|
| OS: | Linksys WVC11B Wireless-B Internet Video Camera 2.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
Description:
John Doe has reported a vulnerability in Linksys WVC11B Wireless-B Internet Video Camera, which can be exploited by malicious people to gain knowledge of sensitive information.
It is possible to disclose the content of arbitrary files by passing their path to the "next_file" parameter in "main.cgi".
Example:
http://[victim]/main.cgi?next_file=/etc/passwd
The vulnerability has been reported in firmware release 2.10. Other versions may also be affected.
Solution:
Restrict access to the web interface.
Provided and/or discovered by:
John Doe
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
