what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Kostya Kortchinsky

Apache Spark Unauthenticated Command Injection

Posted Sep 8, 2022

Authored by Kostya Kortchinsky, h00die-gr3y | Site metasploit.com

This Metasploit module exploits an unauthenticated command injection vulnerability in Apache Spark. Successful exploitation results in remote code execution under the context of the Spark application user. The command injection occurs because Spark checks the group membership of the user passed in the ?doAs parameter by using a raw Linux command. It is triggered by a non-default setting called spark.acls.enable. This configuration setting spark.acls.enable should be set true in the Spark configuration to make the application vulnerable for this attack. Apache Spark versions 3.0.3 and earlier, versions 3.1.1 to 3.1.2, and versions 3.2.0 to 3.2.1 are affected by this vulnerability.

tags | exploit, remote, code execution

systems | linux

advisories | CVE-2022-33891

SHA-256 | 2872827635148239363023f1f407242ab1de4a64b6832222c392d7a683334b7b

Download | Favorite | View

emule-0.42d.txt

Posted Apr 8, 2004

Authored by Kostya Kortchinsky

A vulnerability exists in eMule version 0.42d in the DecodeBase16() function.

tags | advisory

SHA-256 | d3e30ff715989d9e92860890797d21f465cf17dc44a3a328f0318d8843836dbd

Download | Favorite | View

uw-imap.c

Posted May 29, 2002

Authored by Christophe "korty" Bailleux, Kostya Kortchinsky

Imap4 prior to v2001a remote exploit for Linux. Requires user account, includes offsets for Slackware 7.1 and Redhat 7.2.

tags | exploit, remote

systems | linux, redhat, slackware

SHA-256 | e3d4caaea2b25eed9bb16c6915f9acac7dcca8886f577518fc678d5f31d4874a

Download | Favorite | View