Published: 04/02/2011 Updated: 14/02/2024

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 535

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 prior to 20110131 allows remote malicious users to read arbitrary files via .. (dot dot) sequences in the help command, as demonstrated using (1) a crafted email and (2) cgi-bin/mj_wwwusr in the web interface.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mj2 majordomo 2 20110128
mj2 majordomo 2 20110113
mj2 majordomo 2
mj2 majordomo 2 20110124
mj2 majordomo 2 20110108
mj2 majordomo 2 20110127
mj2 majordomo 2 20110125
mj2 majordomo 2 20110117
mj2 majordomo 2 20110101
mj2 majordomo 2 20110116
mj2 majordomo 2 20110109
mj2 majordomo 2 20110115
mj2 majordomo 2 20110114
mj2 majordomo 2 20110123
mj2 majordomo 2 20110112
mj2 majordomo 2 20110103
mj2 majordomo 2 20110118
mj2 majordomo 2 20110121
mj2 majordomo 2 20110104
mj2 majordomo 2 20110129
mj2 majordomo 2 20110111
mj2 majordomo 2 20110126
mj2 majordomo 2 20110102
mj2 majordomo 2 20110105
mj2 majordomo 2 20110119
mj2 majordomo 2 20110122
mj2 majordomo 2 20110120
mj2 majordomo 2 20110106
mj2 majordomo 2 20110107
mj2 majordomo 2 20110110

Original Advisory: sitewatch/en/Advisory/View/1 Credit: Michael Brooks (sitewatch) Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: wwwmj2org/ Affected Build: 20110121 and prior Google dork:inurl:mj_wwwusr Special thanks to Dave Miller, Reed Loden and the rest of the Mozilla secu ...

Majordomo2 versions 20110121 and below suffer from a directory traversal vulnerability ...

Exploits a directory traversal vulnerability existing in Majordomo2 to retrieve remote files. (CVE-2011-0049).

nmap -p80 --script http-majordomo2-dir-traversal <host/ip>

PORT   STATE SERVICE
80/tcp open  http    syn-ack
| http-majordomo2-dir-traversal: /etc/passwd was found:
|
| root:x:0:0:root:/root:/bin/bash
| bin:x:1:1:bin:/bin:/sbin/nologin
|

Exploits a directory traversal vulnerability existing in Majordomo2 to retrieve remote files. (CVE-2011-0049).

nmap -p80 --script http-majordomo2-dir-traversal <host/ip>

PORT   STATE SERVICE
80/tcp open  http    syn-ack
| http-majordomo2-dir-traversal: /etc/passwd was found:
|
| root:x:0:0:root:/root:/bin/bash
| bin:x:1:1:bin:/bin:/sbin/nologin
|

CWE-22 https://bug628064.bugzilla.mozilla.org/attachment.cgi?id=506481 http://secunia.com/advisories/43125 https://sitewat.ch/en/Advisory/View/1 https://bugzilla.mozilla.org/show_bug.cgi?id=628064 http://www.securityfocus.com/bid/46127 http://www.kb.cert.org/vuls/id/363726 http://www.vupen.com/english/advisories/2011/0288 http://www.securitytracker.com/id?1025024 http://osvdb.org/70762 http://securityreason.com/securityalert/8061 http://www.exploit-db.com/exploits/16103 https://exchange.xforce.ibmcloud.com/vulnerabilities/65113 http://www.securityfocus.com/archive/1/516150/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/16103/https://www.kb.cert.org/vuls/id/363726

CVE-2011-0049

Vulnerability Summary

Exploits

Nmap Scripts

References

Vulmon Search

About

Products

Connect