Follow-on to my authentication bypass post from Tuesday. Hidden "ping6" diagnostic page in the Netgear wndr3700v4 allows command injection as root. http://shadow-file.blogspot.com/2013/10/netgear-root-compromise-via-command.html Here's the original auth bypass post, in case you missed it. http://shadow-file.blogspot.com/2013/10/complete-persistent-compromise-of.html Thanks! Zach Twitter:@zcutlip -- :wq!
Attachment:
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/