Marcus Xenakis directory.php Shell Command Execution Vulnerability
BID:4278
Info
Marcus Xenakis directory.php Shell Command Execution Vulnerability
| Bugtraq ID: | 4278 |
| Class: | Input Validation Error |
| CVE: |
CVE-2002-0434 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 12 2002 12:00AM |
| Updated: | Jul 11 2009 11:56AM |
| Credit: | Reported by Florian Hobelsberger / BlueScreen <[email protected]>. |
| Vulnerable: |
Marcus S. Xenakis Unix Manual 1.0 Marcus S. Xenakis directory.php |
| Not Vulnerable: | |
Discussion
Marcus Xenakis directory.php Shell Command Execution Vulnerability
The directory.php script provides a web interface for directory listings, similar to the 'ls' command. An issue exists in this script which could allow a user to execute arbitrary shell commands. This is achieved by including metacharacters such as ; or | in the script's input. Shell commands will execute with the permissions of the script process, often a non-privileged user 'nobody'.
The directory.php script provides a web interface for directory listings, similar to the 'ls' command. An issue exists in this script which could allow a user to execute arbitrary shell commands. This is achieved by including metacharacters such as ; or | in the script's input. Shell commands will execute with the permissions of the script process, often a non-privileged user 'nobody'.