PT-2007-1583 · Apache · Apache Http Server

Kw3[R]Ln · Published 2007-01-05 · Updated 2017-10-19 · CVE-2007-0098

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions VerliAdmin versions 0.3 and earlier

Description The issue allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie. This can be achieved by injecting PHP sequences into an Apache HTTP Server log file, which is then included by language.php, but only when magic quotes gpc is disabled.

Recommendations For VerliAdmin versions 0.3 and earlier, consider disabling the language.php file or restricting access to it until a patch is available. Additionally, enabling magic quotes gpc can mitigate this issue.

Exploit

Fix

Related Identifiers

CVE-2007-0098

Affected Products

Apache Http Server

References · 5

• 🔥 https://exploit-db.com/exploits/3075 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0098 · Security Note
• http://vupen.com/english/advisories/2007/0035 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31241 · Note
• http://osvdb.org/32352 · Note