Directory Traversal Flaw in Netgear FM114P Wireless Router

CVE-2003-1427

Summary

A directory traversal vulnerability exists within the web configuration interface of the Netgear FM114P Wireless Router firmware version 1.4. This flaw allows remote attackers to exploit the port parameter by sending specially crafted requests that include hex-encoded sequences such as '%2e%2e%2f'. Consequently, attackers can traverse directory structures and access sensitive files, including the router's configuration file, which may contain critical information for further exploitation.

References