[2332] in WWW Security List Archive
SV: Which are the security implications
daemon@ATHENA.MIT.EDU (anders.sandell@sakdata.se)
Sat Jul 6 08:55:51 1996
From: anders.sandell@sakdata.se
Date: Sat, 6 Jul 1996 13:08 +100
To: fmora <fmora@banamex.com>, www-security@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu
Hi !
Dunno if you have seen this before, its a big flaw in Novell Web-server
which has been posted at the Best-of-security mailing list.
Cheers,
Anders
---------- Forwarded message ----------
Date: Wed, 3 Jul 1996 14:50:06 -0700 (PDT)
From: TTT Group <tttÉbroder.com>
Subject: *** SECURITY ALERT ***
I spent some time exploring Novell's HTTP server and out of the box
there is a CGI that is VERY VERY INSECURE!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
If you are running the Novell HTTP server, please disable the CGI's
it comes with it until you understand (fully understand) what the
security risks are.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
The CGI in question is convert.bas (yes, cgi's in basic, stop laughing).
(There may be more CGI's in the scripts dir that can be exploited
but this was all I could stomoch.)
A remote user can read any file on the remote file system using
this CGI. This means that if you are running the Novell HTTP
server and have the 'out of box' CGI's, you are breached.
Exploit code:
http://victim.com/scripts/convert.bas?../../anything/you/want/to/view
I was going to see how bad this threat was by connecting to
www servers, testing for "Novell HTTP" in the HTTP server responce
BUT WHY DO THAT WHEN YOU HAVE www.altavista.digital.com :-)
+links:scripts/convert.bas
will return you all the sites that can be breached.
PLEASE PLEASE PLEASE don't open the box and put machine on the
Internet. I am getting tired of this kind of stuff.
Who the hell did Novell consult with to write these darn CGI's?
It makes me sad.
- --blast
------------------------------
----------
Från: fmora <fmora@banamex.com>
Till: www-security@ns2.rutgers.edu; SAKDATA/SESKDSTH/ASD
Angående: Which are the security implications of u
Datum: den 5 juli 1996 19.52
I hope this is not extremely repetitive.
Which security problems are known to Novell Web Server???
Thanks in advance for your help!!!
