CVE-2016-1543

Related Files

BMC Server Automation RSCD Agent NSH Remote Command Execution

Posted Jan 31, 2018

Authored by Nicky Bloor, Olga Yanushkevich | Site metasploit.com

This Metasploit module exploits a weak access control check in the BMC Server Automation RSCD agent that allows arbitrary operating system commands to be executed without authentication. Note: Under Windows, non-powershell commands may need to be prefixed with 'cmd /c'.

tags | exploit, arbitrary

systems | windows

advisories | CVE-2016-1542, CVE-2016-1543

SHA-256 | 020bc853633a23b3189378857da4cf64c9fbfa92972a9d8257b10605b54490ec

Download | Favorite | View

BMC BladeLogic 8.3.00.64 Remote Command Execution

Posted Jan 26, 2018

Authored by Paul Taylor

BMC BladeLogic version 8.3.00.64 suffers from a remote command execution vulnerability.

tags | exploit, remote

advisories | CVE-2016-1542, CVE-2016-1543

SHA-256 | 96811628a219d1a2d4e997236cfb9d820c95744d7700660a86a9edcebd7d80a0

Download | Favorite | View

BMC Server Automation (BSA) RSCD Agent Unauthorized Password Reset

Posted Mar 28, 2016

Site bmc.com

A security vulnerability has been identified in BMC Server Automation (BSA) RSCD Agent on the Linux/Unix platforms. The vulnerability allows unauthorized remote password resets on a target server by using the Remote Procedure Call (RPC) API of the RSCD Agent. Windows agents are not affected. The flaw has been confirmed to exist in the following versions of BSA on Unix and Linux platforms: 8.2.x, 8.3.x, 8.5.x, 8.6.x and 8.7.x.

tags | advisory, remote

systems | linux, windows, unix

advisories | CVE-2016-1543

SHA-256 | 42a2cfa91a915ec32a779d0c3890bb6f351677f99bf1f8a691f39f542b36877b

Download | Favorite | View