PT-2011-2055 · Majordomo · Majordomo

Nikolas Sotiriu · Publicado 2011-03-15 · Atualizado 2018-10-10 · CVE-2011-0063

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Majordomo versions 20110203 and earlier

Description The issue allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./../ sequence in the extra parameter to the help command. This is due to an incomplete fix for a previous issue, which causes the regular expression to produce .. (dot dot) sequences.

Recommendations For Majordomo versions 20110203 and earlier, consider restricting access to the help command or disabling the list file get function in lib/Majordomo.pm until a complete fix is available. Avoid using the extra parameter in the help command to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2011-0063

Produtos afetados

Majordomo

Referências · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/majordomo2_directory_traversal.rb · Exploit
• 🔥 http://sotiriu.de/adv/NSOADV-2011-003.txt · Exploit
• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=631307 · Exploit
• 🔥 https://exploit-db.com/exploits/16103 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66011 · Nota
• http://secunia.com/advisories/43631 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-0063 · Nota de Segurança
• http://securityreason.com/securityalert/8133 · Nota
• http://securityfocus.com/archive/1/516923/100/0/threaded · Nota