Apache Php Execution In Non-declared Mime Types

Articles Metasploit Framework Windows Tutorial Remote Desktop Connection Windows Processes That May Be Dangerous How-To use NetCat a Tutorial Common Linux Commands Common Ports Netcat Commands HTTP Response Codes War-Google Hack Terms Wardriving Avoiding Social Engineering and Phishing Attacks Intrusion Detection on Linux Linux Intrusion Detection Penetration Testing Guide Penetration Testing Tools Social Engineering Fundamentals, Part I: Hacker Tactics Social engineering (computer security) The Psychology of Social Engineering The Archives General GSO GovernmentSecurity.org News & Suggestions In The News Open Topic General Security Information Trash Can Exploit & Vulnerability Mailing List Archives Trial Member Forum Product and Program Reviews GSO Tutorials System Security Windows Systems Beginners Section Linux & Unix Systems File Downloads Exploit Research & Discussion Trojan & Virus Errata Networking Security / Firewall / IDS / VPN / Routers System Hardening E-Mail Security Wifi Security Trial Member Uploads Upload discovered Trojans & Mal ware GSO Programming Section C , C++ , VC++ Visual Basic .NET Perl /CGI Java/Javascript PHP/XML/ASP/HTML Assembly + Other The Cork Board Network Security Consultant Directory Network Security Jobs The Archives Encryption Information General Network Security Internet Anonymity HTTP Protocol Security Linux Security MS IIS Information Exploit Articles Programming / Tool Design GSO Software Projects Public Downloads Microsoft Security Questions and Papers		Help - Search - Member List - Calendar Full Version: Apache Php Execution In Non-declared Mime Types GovernmentSecurity.org > General GSO > Trash Can jim~ Aug 17 2005, 12:15 AM Me and some friends noticed that if apache doesn't recognize a mime-type it'll allow php execution in a file with the extenion .php.ext (replacing ext with the unidentified one). A good one that we used is .php.rar. Sites using CeleronDude's Uploader v5 script are fun to upload shell scripts to. da_cash Aug 17 2005, 04:09 AM nice method but posting vulnerable link's isn't allowed here. read the rules first. nolimit Aug 17 2005, 07:10 AM Uh, yea. That's quite a bug if what you're saying is true. I would recommend you e-mail the apache group if this bug is present in the newest version. Axl Aug 17 2005, 09:08 AM edit the post and remove the links,now !! brOmstar Aug 17 2005, 11:36 AM Checked it today works very well as nolimit said try to contact the apache group this is a serious bug. GSecur Aug 17 2005, 01:10 PM This post is not following the rules and has been trashed. Review the rules for the forum located here. Or you may run the risk of your account being deleted. This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here. Invision Power Board © 2001-2005 Invision Power Services, Inc.