CVE:CVE-2011-4716
CNNVD:CNNVD-201112-131
Dreambox是德国Dream Multimedia公司生产的基于Linux的数字电视机顶盒。
DreamBox DM800 1.6rc3, 1.5rc1以及之前版本中的文件存在目录遍历漏洞。远程攻击者可借助file参数读取任意文件。
solution:Upgrade dream-multimedia-tv dreambox_dm800_hd_se_firmware to a higher version than *:rc3,1.5:rc1,and avoid the version *:rc3,1.5:rc1; Upgrade dream-multimedia-tv dreambox_dm800_hd_se to a higher version than -; Upgrade dream-multimedia-tv dreambox_dm800_hd_pvr_firmware to a higher version than 1.5:rc1,1.6:rc3,and avoid the version 1.5:rc1,1.6:rc3; Upgrade dream-multimedia-tv dreambox_dm800_hd_pvr to a higher version than -