exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

apache-stronghold-search.txt

apache-stronghold-search.txt
Posted May 22, 2002
Authored by Tamer Sahin | Site securityoffice.net

The 'search' CGI utility that comes with the Red Hat Apache-based Stronghold Secure Web Server reveals local path information.

tags | web, local, cgi
systems | linux, redhat
SHA-256 | 428d7364046869ed56448283acf64a6cba01e1581c8675760fe1971235913922

apache-stronghold-search.txt

Change Mirror Download


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --[ Stronghold Secure Webserver Sample Script Path Disclosure
Vulnerability ]--

- --[ Type

Path Disclosure

- --[ Release Date

May 21, 2002

- --[ Product / Vendor

Red Hat's Stronghold is the most mature Apache-based web server
available today with over seven years of development and more than
14,000 servers running it to protect their data. Stronghold provides
the tools to quickly install and configure the popular Apache Web
Server with the security features that customers and business
partners expect when they interact with your site.

http://www.c2.net

- --[ Summary

Any user can send an request Stronghold sample script 'swish' causing
it to reveal the full path to the webroot. In some cases swish will
display system specific information html source code.

http://host/cgi-bin/search

=======================SNIP========================
<HTML>
<HEAD>
<TITLE>Welcome to Stronghold!</TITLE>
</HEAD>

<BODY BGCOLOR="#FFFFFF" TEXT="#000000" VLINK="#FF0000"
LINK="#0000FF">

<H1 ALIGN=CENTER>Search Stronghold Documentation</H1>
<hr><form method="POST" action="/cgi-bin/search">
This is a searchable index of information.<br>
<b>Note:</b> <i>This service can only be used from a forms-capable
browser.</i><p>
Enter keyword(s): <input type=text name="keywords" value="" size=30>
<input type=submit value=" Search ">
<input type=reset value=" Reset ">
<p>
<input type=hidden name=message value="If you can see this, then your
browser can't support hidden fields.">
<input type=hidden name=source value="manual.swish">
(!) <input type=hidden name=sourcedir
value="/home/ts/stronghold/swish/"> (!)
<input type=hidden name=maxhits value="40">
<input type=hidden name=sorttype value="score">
<input type=hidden name=host value="">
<input type=hidden name=port value="">
<input type=hidden name=searchprog value="swish">
<input type=hidden name=iconurl value="/icons">
<input type=hidden name=useicons value="yes">
</form><hr>
=======================SNIP========================

- --[ Tested

OpenBSD 3.0 / Stronghold 3.0

- --[ Vulnerable

Stronghold 3.0 (And may be other)

- --[ Disclaimer

http://www.securityoffice.net is not responsible for the misuse or
illegal use of any of the information and/or the software listed on
this security advisory.

- --[ Author

Tamer Sahin
ts@securityoffice.net
http://www.securityoffice.net

Tamer Sahin
http://www.securityoffice.net
PGP Key ID: 0x2B5EDCB0

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.1

iQA/AwUBPOnUuLuLpFMrXtywEQJPmACfeRnAUYiggiVFoqDr+Wwd+A8n+OYAnjP9
C3phQ2AsK4qFIkkas/3E71Sr
=CyBT
-----END PGP SIGNATURE-----
Login or Register to add favorites

File Archive:

September 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Sep 1st
    23 Files
  • 2
    Sep 2nd
    12 Files
  • 3
    Sep 3rd
    0 Files
  • 4
    Sep 4th
    0 Files
  • 5
    Sep 5th
    10 Files
  • 6
    Sep 6th
    8 Files
  • 7
    Sep 7th
    30 Files
  • 8
    Sep 8th
    14 Files
  • 9
    Sep 9th
    26 Files
  • 10
    Sep 10th
    0 Files
  • 11
    Sep 11th
    0 Files
  • 12
    Sep 12th
    5 Files
  • 13
    Sep 13th
    28 Files
  • 14
    Sep 14th
    15 Files
  • 15
    Sep 15th
    17 Files
  • 16
    Sep 16th
    9 Files
  • 17
    Sep 17th
    0 Files
  • 18
    Sep 18th
    0 Files
  • 19
    Sep 19th
    12 Files
  • 20
    Sep 20th
    15 Files
  • 21
    Sep 21st
    20 Files
  • 22
    Sep 22nd
    13 Files
  • 23
    Sep 23rd
    12 Files
  • 24
    Sep 24th
    0 Files
  • 25
    Sep 25th
    0 Files
  • 26
    Sep 26th
    0 Files
  • 27
    Sep 27th
    0 Files
  • 28
    Sep 28th
    0 Files
  • 29
    Sep 29th
    0 Files
  • 30
    Sep 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close