Last Lines CGI Script Remote Command Execution Vulnerability

Bugtraq ID:	3755
Class:	Input Validation Error
CVE:	CVE-2001-1206
Remote:	Yes
Local:	No
Published:	Dec 30 2001 12:00AM
Updated:	Jul 11 2009 09:06AM
Credit:	This vulnerability was submitted to BugTraq on December 30th, 2001 by BrainRawt <[email protected]>.
Vulnerable:	Matrix's CGI vault Last Lines 2.0 - Apache Apache 1.3.22 - Apache Apache 1.3.20 - Apache Apache 1.3.19 - Apache Apache 1.3.18 - Apache Apache 1.3.17
Not Vulnerable:

Last Lines CGI Script Remote Command Execution Vulnerability

Last Lines CGI is a freely available script written in Perl and maintained by the Matrix's CGI Vault. It allows the user to print a specified number of lines from the end of a log file(or any text file) to a webpage. It can run on Linux and Unix systems or any other platform with Apache and Perl support.

Lastlines.cgi does not filter shell metacharacters from web requests. As a result, it is possible for a remote attacker to execute commands on the shell of a host running the vulnerable script. Commands will be executed with the privileges of the webserver process.

This impact of this vulnerability is that an attacker may gain local, interactive access to the host.

Last Lines CGI Script Remote Command Execution Vulnerability

This vulnerability can be exploited with a web browser.

Last Lines CGI Script Remote Command Execution Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Last Lines CGI Script Remote Command Execution Vulnerability

References:

• Last Lines Homepage (Matrix's CGI Vault)