|
Brought to you by:
Suppliers of:
|
|
|
| |
| CCBill uses a CGI called whereami.cgi for its technical support needs, a vulnerability in the CGI allows remote attackers to execute commands on the server the CGI has been installed under. This would allow a remote user to compromise the server. |
| |
Credit:
The information has been provided by Dayne Jordan.
|
| |
A vulnerability has been reported in CCBill whereami.cgi, which can be exploited by malicious people to compromise a vulnerable system.
It is possible to supply system commands to the "g" parameter, which allows execution of arbitrary commands with the privileges of the web service.
An example was included in the original advisory:
http://[victim]/ccbill/whereami.cgi?g=cat%20../../../../etc/password
Solution:
Remove the whereami.cgi from the server's CGI path.
|
|
|
|
|
