security issue

SuExec should be enabled by default, and shouldn't let this script work with all rights (if the user has no shell acccess). Use the following mod_security rule if the script does work on your server:
Code: 
SecFilterSelective THE_REQUEST "cgitelnet"
SecFilter "a=login&p="
SecFilter "a=command&d=(.*)&c="
SecFilterSelective THE_REQUEST "\?a=(up|down)load&d="
 
Then recive the next error

Stopping httpd:
Remaining processes: 8733 8879 8880 8881 8888 8942
Stopping httpd:
Starting httpd: Syntax error on line 9 of /etc/modsecurity2/user_defined_rules.conf:
Invalid command 'SecFilterSelective', perhaps misspelled or defined by a module not included in the server configuration

Kind regards.
 
The rules posted by smtalk were the ones I posted on WHT a few years ago, and were for modsec v1. The modsec v2 rules are here:

Code: 
SecRule REQUEST_URI "cgitelnet"
SecRule REQUEST_URI "a=login&p="
SecRule REQUEST_URI "a=command&d=(.*)&c="
SecRule REQUEST_URI "\?a=(up|down)load&d="
 
Last edited:
You must log in or register to reply here.
Back
Top