CVE-2019-16278

CVE-2019-16278 和 CVE-2019-16279 的漏洞利用 Nostromo httpd 在版本 &1 该漏洞是由于对 CVE-2011-0751 的修复不完整导致的。我们可以绕过对 /../ 的检查，从而使用任意参数执行 /bin/sh。 示例 root@kitploit: $ ./CVE-2019-16278.sh 127.0.0.1 8080 id uid=1001sp0re gid=1001sp0re groups=1001sp0re CVE-2019-16279 - 拒绝服务 该漏洞利用了在单个连接中发送过多 \r\n 时触发的内存错误。 示例...

CVE-2019-16278

CVE-2019-16278 CVE-2019-16278Nostromo httpd命令执行 ➜ Downloads python nostromo.py 114.114.114.114 8080 pwd /bin ➜ Downloads python nostromo.py 114.114.114.114 8080 id uid=65534 gid=65534 ➜ Downloads python nostromo.py 114.114.114.114 8080 "ls -al" drwxr-xr-x 2 0 0 0 Apr 12 2013 . drwxr-xr-x 16 0 0 0...

nostromo nhttpd path traversal vulnerability

nostromo nhttpd is an open source web server . A path traversal vulnerability exists in the 'httpverify' function in nostromo nhttpd 1.9.6 and earlier. The vulnerability stems from a failure of a network system or product to properly filter special elements in the path of a resource or file. An...