CORE IMPACT - Support :: The First Penetration Testing Framework

Apache mod_php exploit v1.53

Vulnerability exploited: CVE-2002-0081 - BID-4183

Category: Exploits/Remote

Takes advantage of a bug in the function php_mime_split() when computing how many chars are left in the request.
After successful exploitation a level 0 agent will be installed. Usually Apache is ran as the user nobody, or some other low privileged user. After exploitation, the level 0 agent will be running as this user.

Supported Systems:

This module is included in the latest version of CORE IMPACT, the first automated comprehensive penetration testing product for accurately identifying information security risks. Click here to learn more about the product.