CVE-2021-41773 PoC — Apache HTTP Server 路径遍历漏洞

来源

关联漏洞

介绍

# CVE-2021-41773

apache http server vulnerability (only works 2.4.49)

## requirement settings

httpd.conf

```
...
<IfModule mpm_prefork_module>
	LoadModule cgi_module modules/mod_cgi.so # uncomment this line
</IfModule>
...
<Directory />
    AllowOverride none
#    Require all denied # comment out this line or set `Require all granted`
</Directory>
...
```

## References

- https://attackerkb.com/topics/1RltOPCYqE/cve-2021-41773/rapid7-analysis

文件快照

 [4.0K]  /data/pocs/34e3c6e59c04a8b84dc7dd472c7e2537ab6f4c16
├── [ 452]  README.md
├── [4.0K]  unix
│   ├── [  78]  Dockerfile
│   ├── [ 20K]  httpd.conf
│   └── [ 109]  README.md
└── [4.0K]  windows
    ├── [ 979]  Dockerfile
    ├── [ 20K]  httpd.conf
    └── [ 131]  README.md

2 directories, 7 files

备注