Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam™  Beyond Security®  SecuriTeam™ Home  Ask the Team  Mailing Lists  Advertising Info  Blogs  Black Box Testing  Vulnerability Assessment  Vulnerability Scanner SecuriTeam™ in Your Inbox   E-mail this article to a friend New vulnerability? New tool? Tell us	PHP with Apache on Windows 2000 vulnerable to directory traversal 10 Dec. 2000    Summary A security vulnerability has been found in Windows NT/2000 systems that have Apache and PHP installed. The vulnerability allows remote attackers to access files outside the document root directory scope.   Credit: The information has been provided by china nsl.    Details Audit your web server for security holes - see what the hackers see. Sign up for a scan today - risk free! Vulnerable systems: Apache 1.3.6 and PHP3 under Windows 2000 By sending the following URL request: http://www.example.com/index.php3.%5c../..%5cconf/httpd.conf It is possible to cause the Apache server to send back the content of /etc/httpd.conf.  Comments:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews  Related Articles AVTECH PageR Enterprise Directory Traversal Google Chrome Browser Automatic File Download Novell iPrint Client nipplib.dll "IppCreateServerRef()" Buffer Overflow Microsoft ASP.NET ValidateRequest Filters Bypassing Allows XSS And HTML Injection Attacks Kyocera Mita Scanner File Utility (Multiple) Novell iPrint Client ActiveX Control Multiple Vulnerabilities DriveCrypt Security Model Bypass and Incorrect BIOS API Usage Windows Media Services (nskey.dll) CallHTMLHelp Buffer Overflow Trend Micro Products Web Management Authentication Bypass Anzio Web Print Object Buffer Overflow Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass (MS08-043) Microsoft Windows Messenger Illegal Access Vulnerability (MS08-050) MicroWorld MailScan - Multiple Vulnerabilities within Admin-Webinterface Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability Vulnerability in Cisco WebEx Meeting Manager ActiveX Control  Featured Articles Google Chrome Browser Automatic File Download Microsoft ASP.NET ValidateRequest Filters Bypassing Allows XSS And HTML Injection Attacks vBulletin Cross Site Scripting Vulnerability (popup) Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass (MS08-043) MicroWorld MailScan - Multiple Vulnerabilities within Admin-Webinterface Sun xVM VirtualBox Privilege Escalation Vulnerability Vulnerabilities in DNS Allows Spoofing (MS08-037)
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus - Blogs - CVEs

Copyright © 1998-2008 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®