CVE-2011-0063

The exploit demonstrates a directory traversal vulnerability in Majordomo2 via both email and HTTP interfaces, allowing unauthorized access to arbitrary files (e.g., /etc/passwd). The PoC includes a crafted HTTP request and email body to trigger the flaw.

This Metasploit module exploits a directory traversal vulnerability in Majordomo2's _list_file_get() function to retrieve arbitrary files, such as config.pl, by manipulating the URI path with traversal sequences.