ID CVE-2004-2032
Summary Netgear RP114 allows remote attackers to bypass the keyword based URL filtering by requesting a long URL, as demonstrated using a large number of %20 (hex-encoded space) sequences.
References
Vulnerable Configurations
  • cpe:2.3:h:netgear:rp114:3.26:*:*:*:*:*:*:*
    cpe:2.3:h:netgear:rp114:3.26:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 11-07-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 10404
bugtraq 20040524 Netgear RP114 URL filter fails if URL is too long
osvdb 6411
secunia 11698
xf netgearrp114-long-url-filter-bypass(16238)
Last major update 11-07-2017 - 01:31
Published 24-05-2004 - 04:00
Last modified 11-07-2017 - 01:31
Back to Top