|
|
| |
| "UNIX Manual" is a PHP-Script by Marcus S. Xenakis, which allows users to view the UNIX man-Pages via Browser. This script does not adequately filter dangerous characters which results in arbitrary command execution. |
| |
Credit:
The information has been provided by Florian Hobelsberger / BlueScreen.
|
| |
It seems like the script pipes requests directly to the shell without checking for insecure characters such as ";".
Example:
- Go to a Page using this script.
- Enter in the textbox:
; ls -l
This would result in "Unix Manual" showing you the contents of the directory in which the script is located.
Impact:
By using this bug, it is possible for an attacker to execute every UNIX-command he wants with HTTP-Daemon-Rights.
|
|
|
