Exploitation Summary
EIP tracks 2 public exploits for CVE-2011-0063.
PoCs published by Michael Brooks, Nikolas Sotiriu, including Metasploit module auxiliary/scanner/http/majordomo2_directory_traversal.
AI-analyzed exploit summary The exploit demonstrates a directory traversal vulnerability in Majordomo2 via both email and HTTP interfaces, allowing unauthorized access to arbitrary files (e.g., /etc/passwd). The PoC includes a crafted HTTP request and email body to trigger the flaw.
Description
The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./.../ sequence in the "extra" parameter to the help command, which causes the regular expression to produce .. (dot dot) sequences. NOTE: this vulnerability is due to an incomplete fix for CVE-2011-0049.
Exploits (2)
The exploit demonstrates a directory traversal vulnerability in Majordomo2 via both email and HTTP interfaces, allowing unauthorized access to arbitrary files (e.g., /etc/passwd). The PoC includes a crafted HTTP request and email body to trigger the flaw.
This Metasploit module exploits a directory traversal vulnerability in Majordomo2's _list_file_get() function to retrieve arbitrary files, such as config.pl, by manipulating the URI path with traversal sequences.