PT-2007-1583 · Apache · Apache Http Server

Kw3[R]Ln · Publicado 2007-01-05 · Atualizado 2017-10-19 · CVE-2007-0098

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions VerliAdmin versions 0.3 and earlier

Description The issue allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie. This can be achieved by injecting PHP sequences into an Apache HTTP Server log file, which is then included by language.php, but only when magic quotes gpc is disabled.

Recommendations For VerliAdmin versions 0.3 and earlier, consider disabling the language.php file or restricting access to it until a patch is available. Additionally, enabling magic quotes gpc can mitigate this issue.

Exploit

Correção

Identificadores relacionados

CVE-2007-0098

Produtos afetados

Apache Http Server

Referências · 5

• 🔥 https://exploit-db.com/exploits/3075 · Exploit
• http://vupen.com/english/advisories/2007/0035 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31241 · Nota
• http://osvdb.org/32352 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0098 · Nota de Segurança