Attack một Webserver OmniHTTPd v2.07

OmniHTTPd la mot Webserver chay tren nen OS Win95/97/98/NT/2K. Den Version 2.07 thi bi"Omnicron Technologies Corporation was notified via" phat hien ra 2 lo hong bao mat kha tramtrong. OK! bay gio chung ta bat dau trao doi va tim hieu ve 2 lo hong nay xtoi no tram trong rasao?
Nội dung trích xuất từ tài liệu:
Attack một Webserver OmniHTTPd v2.07AttackmộtWebserverOmniHTTPdv2.07:trangnàyđãđượcđọc lầnChaocacban!homnaytoilaigioithieutiepvoibancachAttackmotWebserverOmniHTTPd v2.07.OmniHTTPdlamotWebserverchaytrennenOSWin95/97/98/NT/2K.DenVersion2.07thibi OmnicronTechnologiesCorporationwasnotifiedviaphathienra2lohongbaomatkhatram trong.OK!baygiochungtabatdautraodoivatimhieuve2lohongnayxtoinotramtrongra sao?DautientrenmaybanphaicocaiPerl(PraticalExtractionAndReportingLanguage),va canphaitaidoanCodecuaJoeTestadekhaithac2lohongbaomatnay.Lohongthunhat:LohongthunhatchophepcacHackercophahongbatcumotfilenaotren Webserver....Dandennhieuhauquanghitoitrong.NeunhucacHackercothebietduocchinh xacvitrifilemaminhcanphahoai.GiasubandacotrongtadoanCodecuaJoeTesta.Banra DOSgo:perlomnismash.pllocalhost80corruptduong_dan_file_can_pha_huyVD:perlomnismash.pllocalhost80corruptc:\autoexec.batDonglenhtrensephahongfileautoexec.battrenWebserver...Bancothetudophahuycacfile khacneunhubanbietchinhxacvitricuano.Lohongbaomatthuhai:CacHackercothesuadoinoidungfilestats.plbangdoanScriptco san.TatnhienlaviecnaycoichchoviecAttackroi,changaithuacommadisualungtungca. BanraDOSgo:perlomnismash.pllocalhost80injectduong_dan_cua_file_stats.plDelamduocdieunaybanphaibietchinhxacvitricuafilestats.pl....NeunhuOmniHTTPdduoc SettingochedoDefaultthiduongdancuanocothelac:\httpd\cgibin...Noichungcainaythi contuyServer,tuyAdmin....VD:perlomnismash.pllocalhost80injectc:\httpd\cgibinNeuthanhcong,filestats.pldaduocthaythe.BankhoidongBrowsercuaminhtrongForm Addressgohttp://localhost/cgibin/stats.pl?|dirthibansenhinthayduoccacfiletrongtrongthu muccgibin.P..h..uvaylabandaHacksongmotWebserverOmniHTTPdroido.Buanotoilen mangkitoiduocduocmotdiachigoiBugWeb(dailoailacactrangWebbidinhBug...chuyen dungdechocacHackermoivonghethuchanhduoidayladiachicuano)http://www.tlsecurity.net/archive/exploits/02_01/[Vuln.05.02.2001].java.server.txthttp://www.tlsecurity.net/archive/exploits/02_01/[Vuln.05.02.2001].hsweb.root.exposure.txthttp://www.tlsecurity.net/archive/exploits/02_01/[Vuln.05.02.2001].sedum.txthttp://www.tlsecurity.net/archive/exploits/02_01/[Vuln.05.02.2001].bibliowebserver.txthttp://www.tlsecurity.net/archive/exploits/02_01/[Vuln.05.02.2001].picserver.txt