MRTG CGI Arbitrary File Display Vulnerability
BID:4017
Info
MRTG CGI Arbitrary File Display Vulnerability
| Bugtraq ID: | 4017 |
| Class: | Input Validation Error |
| CVE: |
CVE-2002-0232 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 02 2002 12:00AM |
| Updated: | Jul 11 2009 09:56AM |
| Credit: | Posted to BugTraq on February 02, 2002 by UkR Security Team. |
| Vulnerable: |
MRTG Multi Router Traffic Grapher CGI 2.9.17 -win32 MRTG Multi Router Traffic Grapher CGI 2.9.17 -unix |
| Not Vulnerable: | |
Discussion
MRTG CGI Arbitrary File Display Vulnerability
Multi Router Traffic Grapher (MRTG) CGI scripts (current version is 2.9.17) allow display of arbitrary files from the host machine. This can be accomplished by specifying a relative path and file name in a query string passed to the scripts via a properly constructed URL. The scripts reported to be vulnerable include mrtg.cgi, traffic.cgi, 14all-1.1.cgi, and 14all.cgi. An example URL is: http://somehost/mrtg.cgi?cfg=../../../../../../../../etc/passwd. All affected scripts are reportedly exploited with the same query string. (ie, the "cfg=" variable).
Multi Router Traffic Grapher (MRTG) CGI scripts (current version is 2.9.17) allow display of arbitrary files from the host machine. This can be accomplished by specifying a relative path and file name in a query string passed to the scripts via a properly constructed URL. The scripts reported to be vulnerable include mrtg.cgi, traffic.cgi, 14all-1.1.cgi, and 14all.cgi. An example URL is: http://somehost/mrtg.cgi?cfg=../../../../../../../../etc/passwd. All affected scripts are reportedly exploited with the same query string. (ie, the "cfg=" variable).
Exploit / POC
MRTG CGI Arbitrary File Display Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
MRTG CGI Arbitrary File Display Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
MRTG CGI Arbitrary File Display Vulnerability
References:
References: