Re: 3 pigs building web servers? hacker wolf?

["Riley Hassell" <root () cyphernaut net>]

BrickServer thttpd vulns:

1.) Viewing files:
    /cgi-bin/ssi/filetoview
    ( Can't break webroot if chroot is enabled )

2.) Directory Listings:
     /%2f
    ( Can't break webroot if chroot is enabled )

Riley Hassell
Network Penetration Specialist
eEye Digital Security

Get up...
and light the world on fire.


----- Original Message ----- 
From: "Robert Shea" <robert.shea () appliedinterconnect com>
To: <pen-test () securityfocus com>
Sent: Monday, June 18, 2001 3:22 PM
Subject: 3 pigs building web servers? hacker wolf?


> Is anyone at all familiar with the BrickServer system?
> (http://brickserver.com/) I have looked over their site and the whole
> thing looks pretty questionable, but a new client of ours runs it. I
> have only been able to find the thttp DOS issue.
>
> thank you,
> robert