Showing 1 - 2 of 2

Files from sztivi

First Active	2018-01-10
Last Active	2018-01-10

HPE iMC dbman RestoreDBase Unauthenticated Remote Command Execution: Posted Jan 10, 2018; Authored by Chris Lyne, sztivi | Site metasploit.com; This Metasploit module exploits a remote command execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center before version 7.3 E0504P04. The dbman service allows unauthenticated remote users to restore a user-specified database (OpCode 10007), however the database connection username is not sanitized resulting in command injection, allowing execution of arbitrary operating system commands as SYSTEM. This service listens on TCP port 2810 by default. This Metasploit module has been tested successfully on iMC PLAT v7.2 (E0403) on Windows 7 SP1 (EN).; tags | exploit, remote, arbitrary, tcp; systems | windows; advisories | CVE-2017-5817; SHA-256 | 6e617c9e2dc52b8e3176ccf763528cbf0564f66df4920f7c15aa5b7cd694b5ea; Download | Favorite | View

HPE iMC dbman RestartDB Unauthenticated Remote Command Execution: Posted Jan 10, 2018; Authored by Chris Lyne, sztivi | Site metasploit.com; This Metasploit module exploits a remote command execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center before version 7.3 E0504P04. The dbman service allows unauthenticated remote users to restart a user-specified database instance (OpCode 10008), however the instance ID is not sanitized, allowing execution of arbitrary operating system commands as SYSTEM. This service listens on TCP port 2810 by default. This Metasploit module has been tested successfully on iMC PLAT v7.2 (E0403) on Windows 7 SP1 (EN).; tags | exploit, remote, arbitrary, tcp; systems | windows; advisories | CVE-2017-5816; SHA-256 | 8593e2a11cac9b478374fc96e4123be69ffbd8aafe9adc13437d98414d73a636; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days