[UNIX] Plesk (PSA) Allows Reading of .PHP Files
From: support@securiteam.comDate: 12/24/01
- Previous message: support@securiteam.com: "[NT] Internet Explore HTTPS Certificate Attack"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: support@securiteam.com To: list@securiteam.com Date: Mon, 24 Dec 2001 22:02:30 +0100 (CET)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
When was the last time you checked your server's security?
How about a monthly report?
http://www.AutomatedScanning.com - Know that you're safe.
- - - - - - - - -
Plesk (PSA) Allows Reading of .PHP Files
------------------------------------------------------------------------
SUMMARY
<http://www.plesk.com/html/> Plesk is a server administrator used by many
web-hosting companies to make their management of the servers easier. A
security vulnerability in the products allows anyone to read the source
code of the hosted .PHP files.
DETAILS
Vulnerable systems:
Plesk versions prior to 2.0
Immune systems:
Plesk version 2.0 (safe except if you got UserDir directive enabled)
Example:
If for example, HOSTING_SERVER is running Plesk, and they host
http://www.example.net, and pleskrules runs PHPNuke, Pleskrules's
configuration file with the database password would be located at
http://www.example.net/configure.php.
If we want to see the sources of this PHP we only need to go here:
http://xxx.xxx.xxx.xxx/~example/configure.php (where obviously
'xxx.xxx.xxx.xxx' stands for the ip of the domain example.net and
'~example' is the username of the account of example.net - usually the
name of the domain with '~' before).
Solution:
Upgrade to the latest version, available at:
<http://www.plesk.com/html/> http://www.plesk.com/html/
To turn off the UserDir directive simply add:
<IfModule mod_userdir.c>
UserDir disabled
</IfModule>
ADDITIONAL INFORMATION
The information has been provided by <mailto:supergate@twlc.net>
twlc.net.
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.
- Previous message: support@securiteam.com: "[NT] Internet Explore HTTPS Certificate Attack"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
