--- Apache Web Server Directory Traversal and Path Disclosure Vulnerability (non UNIX) -------------------------------------------------------------
SUMMARY
The Apache server (non UNIX) has been found to contain two security vulnerabilities, one a directory traversal vulnerability, the second a path disclosure vulnerability. The first vulnerability allows an attacker to any file in file system and execute it using a prefix of a /cgi-bin/. The second vulnerability is a simple path disclosure bug, useful for obtaining more info about the server (important if the administrator hide some information).
DETAILS
Vulnerable systems: * Apache web server version 2.0.39 and previous 2.0.x (Windows/Netware/OS2)
Immune systems: * Apache web server (UNIX) * Apache web server version 2.0.40 (Windows/Netware/OS2)
Path disclosure: The vulnerability is not dangerous because it does not give remote access to the system or other data accesses but for an attacker it is useful in gathering detailed information about the server to launch other malicious attacks.
HTTPの時はmod_gzipが有効に動作しているのですが、HTTPSだとerror_logに mod_gzip: EMPTY FILE [/tmp/_54463_99_0.wrk] in sendfile2 mod_gzip: Make sure all named directories exist and have the correct permissions. と出てしまい、動いてくれてないようです。
[Tue Aug 27 17:15:53 2002] [error] [client 202.240.8.201] Options ExecCGI is off in this directory: /home/user/hoge/public_html/cgi-bin/test.cgi のように、ExecCGIがOFFになっていると怒られます。
Openssl-0.9.6gが/usr/local/opensslにインストールしてある状態で、 ./configure \ --prefix=/usr/local/apache2-2.0.40 \ --enable-mods-shared=most \ --enable-modules=ssl --with-ssl=/usr/local/openssl make make install したあと、 apachectl startsslすると Syntax error on line 243 of /usr/local/apache2-2.0.40/conf/httpd.conf: Cannot load /usr/local/apache2-2.0.40/modules/mod_ssl.so into server: /usr/local /apache2-2.0.40/modules/mod_ssl.so: Undefined symbol "X509_free" と言われてしまい、起動しません。どうしたらいいでしょうか？