security issue

[totomcs]

Hi,

How can i disable this script on directadmin? http://www.rohitab.com/site/files/2009/11/cgitelnet.txt

Kind Regards,

 

[smtalk]

SuExec should be enabled by default, and shouldn't let this script work with all rights (if the user has no shell acccess). Use the following mod_security rule if the script does work on your server:

SecFilterSelective THE_REQUEST "cgitelnet"
SecFilter "a=login&p="
SecFilter "a=command&d=(.*)&c="
SecFilterSelective THE_REQUEST "\?a=(up|down)load&d="

 

[totomcs]

Then recive the next error

Stopping httpd:
Remaining processes: 8733 8879 8880 8881 8888 8942
Stopping httpd:
Starting httpd: Syntax error on line 9 of /etc/modsecurity2/user_defined_rules.conf:
Invalid command 'SecFilterSelective', perhaps misspelled or defined by a module not included in the server configuration

Kind regards.

 

[randomuser]

The rules posted by smtalk were the ones I posted on WHT a few years ago, and were for modsec v1. The modsec v2 rules are here:

SecRule REQUEST_URI "cgitelnet"
SecRule REQUEST_URI "a=login&p="
SecRule REQUEST_URI "a=command&d=(.*)&c="
SecRule REQUEST_URI "\?a=(up|down)load&d="

 

[totomcs]

Thankyou. but this does't work..

Regards,