Apache Web Server with Php 3 File Disclosure Vulnerability
BID:2060
Info
Apache Web Server with Php 3 File Disclosure Vulnerability
| Bugtraq ID: | 2060 |
| Class: | Input Validation Error |
| CVE: |
CVE-2001-0042 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Dec 06 2000 12:00AM |
| Updated: | Jul 11 2009 03:56AM |
| Credit: | Discovered and posted to Bugtraq by china nsl <[email protected]> on Dec 6, 2000. |
| Vulnerable: |
Apache Apache 1.3 |
| Not Vulnerable: | |
Discussion
Apache Web Server with Php 3 File Disclosure Vulnerability
Apache Web Server is subject to disclose files to unauthorized users when used in conjunction with the PHP3 script language.
By requesting a specially crafted URL by way of php, it is possible for a remote user to gain read access to a known file that resides on the target host.
Successful exploitation of this vulnerability could lead to the disclosure of sensitive information and possibly assist in further attacks against the victim.
Apache Web Server is subject to disclose files to unauthorized users when used in conjunction with the PHP3 script language.
By requesting a specially crafted URL by way of php, it is possible for a remote user to gain read access to a known file that resides on the target host.
Successful exploitation of this vulnerability could lead to the disclosure of sensitive information and possibly assist in further attacks against the victim.
Exploit / POC
Apache Web Server with Php 3 File Disclosure Vulnerability
The following example has been provided by china nsl <[email protected]>:
http://target/index.php3.%5c../..%5cconf/httpd.conf
The following example has been provided by china nsl <[email protected]>:
http://target/index.php3.%5c../..%5cconf/httpd.conf
Solution / Fix
Apache Web Server with Php 3 File Disclosure Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Apache Web Server with Php 3 File Disclosure Vulnerability
References:
References:
- Apache Software Foundation Homepage (Apache Software Foundation)