PT-2011-2055 · Majordomo · Majordomo

Nikolas Sotiriu · Published 2011-03-15 · Updated 2018-10-10 · CVE-2011-0063

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Majordomo versions 20110203 and earlier

Description The issue allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./../ sequence in the extra parameter to the help command. This is due to an incomplete fix for a previous issue, which causes the regular expression to produce .. (dot dot) sequences.

Recommendations For Majordomo versions 20110203 and earlier, consider restricting access to the help command or disabling the list file get function in lib/Majordomo.pm until a complete fix is available. Avoid using the extra parameter in the help command to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2011-0063

Affected Products

Majordomo

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/majordomo2_directory_traversal.rb · Exploit
• 🔥 http://sotiriu.de/adv/NSOADV-2011-003.txt · Exploit
• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=631307 · Exploit
• 🔥 https://exploit-db.com/exploits/16103 · Exploit
• http://secunia.com/advisories/43631 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0063 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66011 · Note
• http://securityreason.com/securityalert/8133 · Note
• http://securityfocus.com/archive/1/516923/100/0/threaded · Note