IRIX cgi-bin wrap Vulnerability

Bugtraq ID:	373
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 19 1997 12:00AM
Updated:	Apr 19 1997 12:00AM
Credit:	This vulnerability was first reported to the Bugtraq mailing list by J.A. Gutierrez <[email protected]> on April 29, 1997
Vulnerable:	SGI IRIX 6.2
Not Vulnerable:

IRIX cgi-bin wrap Vulnerability

A vulnerability exists in the cgi-bin program 'wrap', as included with Irix 6.2 from SGI. A failure to validate input results in a vulnerability that allows any remote attacker to view the contents of any world readable directory remotely. This can be used to gain information that may be helpful in carrying out other attacks.

IRIX cgi-bin wrap Vulnerability

http://sgi.victim/cgi-bin/wrap?/../../../../../etc

IRIX cgi-bin wrap Vulnerability

Solution:
A suitable patch was included with the exploit when it was reported on the Bugtraq mailing list.
*** /var/www/cgi-bin/wrap Sat Apr 19 23:08:03 1997
--- /var/www/cgi-bin/wrap.O Sat Apr 19 23:07:44 1997
***************
*** 66,74 ****
$doc = $ROOT.$PATH ;

&DefaultMesg if ! defined $PATH || $PATH eq "" ; # Get a base listing =)
-
- $_ = $PATH;
-
&ErrBadPath unless &ValidPath ; # Check for server spoofing
&ErrBadPath unless -e $doc ; # Check to see it exists
&HandleDownload if -f $doc ; # Do the right thing
--- 66,71 ----

Please go to SGI support at http://support.sgi.com for official patches from Silicon Graphics for this any other vulnerabilities.

IRIX cgi-bin wrap Vulnerability

References:

• SGI Support (Silicon Graphics Inc.)