CVE-2020-13151

Related Files

Aerospike Database UDF Lua Code Execution

Posted Dec 11, 2020

Authored by Brendan Coles, b4ny4n | Site metasploit.com

Aerospike Database versions before 5.1.0.3 permitted user-defined functions (UDF) to call the os.execute Lua function. This Metasploit module creates a UDF utilizing this function to execute arbitrary operating system commands with the privileges of the user running the Aerospike service. This module does not support authentication; however Aerospike Database Community Edition does not enable authentication by default. This module has been tested successfully on Ubuntu with Aerospike Database Community Edition versions 4.9.0.5, 4.9.0.11 and 5.0.0.10.

tags | exploit, arbitrary

systems | linux, ubuntu

advisories | CVE-2020-13151

SHA-256 | 9da6a0d3621953b2fc4709d0b41d45d3637b5f4cbe3f23650d74e4584833bfb6

Download | Favorite | View

Aerospike Database 5.1.0.3 Remote Command Execution

Posted Nov 17, 2020

Authored by Matt S

Aerospike Database version 5.1.0.3 suffers from a remote command execution vulnerability.

tags | exploit, remote

advisories | CVE-2020-13151

SHA-256 | 85d661669c51c929165146b2e93e735c18d4d5c9f251500e8397b85991b533ba

Download | Favorite | View