Exploitation Summary
EIP tracks 2 public exploits for CVE-2011-0049.
PoCs published by Michael Brooks, Nikolas Sotiriu, including Metasploit module auxiliary/scanner/http/majordomo2_directory_traversal.
A Nuclei detection template is also available.
AI-analyzed exploit summary The exploit demonstrates a directory traversal vulnerability in Majordomo2 via both email and HTTP interfaces, allowing unauthorized access to arbitrary files (e.g., /etc/passwd). The PoC includes a crafted HTTP request and email body to trigger the flaw.
Description
Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the help command, as demonstrated using (1) a crafted email and (2) cgi-bin/mj_wwwusr in the web interface.
Exploits (2)
The exploit demonstrates a directory traversal vulnerability in Majordomo2 via both email and HTTP interfaces, allowing unauthorized access to arbitrary files (e.g., /etc/passwd). The PoC includes a crafted HTTP request and email body to trigger the flaw.
This Metasploit module exploits a directory traversal vulnerability in Majordomo2's _list_file_get() function by sending crafted HTTP requests to retrieve arbitrary files from the server. It attempts to fetch the specified file (default: config.pl) using path traversal sequences and stores the retrieved content as loot.