Wow, that got nasty at the end

Nice find!

I'm trying to implement this vulnerability into the up and coming DVWA LiveCD.

httpd.conf:


Apache is running as user 'nobody' in the 'nogroup' group.

I can connect but not execute any commands.Using a webdav client 'cadaver' I get an internal server error 500 when trying to execute any commands.

I assumed this was down to permissions so I changed the permissions as such:


Still no joy.

The DavTest tool also connects but fails on MKCOL and any PUT requests.

Any ideas?

EDIT:--

Apache 2.2.14, PHP 5.3.1, Ubuntu server 10.04 minimal

EDIT:--

Got it working.

DavLockDB needs a file name not folder directory. So changed this:

for this: