0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
man-cgi Local File Inclusion Vulnerability
Author
Risk
[Security Risk Medium
]0day-ID
Category
Date add
CVE
Platform
man-cgi before 1.16 allows Local File Inclusion via absolute path traversal. If an Attacker provides a Filename as a Parameter (e.g. https://example.org/cgi-bin/man-cgi?/etc/passwd) the Script will read and return the local file. This is happening because of the way the Script calls the "man" command. Tests have shown that "man /some/random/file" (depending on it's configuration) will first try to locate a manual page for the given Parameter and will fallback to reading the file provided by the Parameter if it wasn't able to find the requested manual page. The Author of the Script was contacted and was kind enough to provide a bugfix Version. You can find the bugfix Version here: http://users.softlab.ntua.gr/~christia/man-cgi.html [Vendor of Product] Panagiotis Christias (http://users.softlab.ntua.gr/~christia/) [Affected Product Code Base] man-cgi < 1.16 [Attack Type] Remote [Impact Information Disclosure] True [Attack Vectors] HTTP(s) Request [Has vendor confirmed or acknowledged the vulnerability?] True # 0day.today [2024-07-02] #