[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20080318132122.8687.qmail@securityfocus.com>
Date: 18 Mar 2008 13:21:22 -0000
From: xx_hack_xx_2004@...mail.com
To: bugtraq@...urityfocus.com
Subject: cPanel 11.x => List Directories and Folders
Hello,,
I Discovered a new bug in cPanel to show the directions (Folders Only) on the server
in Disk Usage part
for example, I tried to see the folders in /etc
and it worked !
that would show you a list of directions of folders
and that including programes on the server, this could be dangerous !
the attacker may use the exploit to see programes on the server and find bugs for them
also you may see the directions of backups in the server
also you have the permission to see the folders in other websites on the server which is been protected by firewall
tested on / cPanel version 11.18.3
to see more information & Exploits for this bug /
http://www.lezr.com/exploits/id/156
Discovered by Linux_Drox
Best Regards,,
L-G-H TEAM
LeZr.Com Group : The Arab Center For Pirates
www.LeZr.Com
Powered by blists - more mailing lists