Metasploit modules that can be used to exploit Alcatel-lucent products

Order by Disclosure Date Module Name Module Type
  • Alcatel-Lucent OmniPCX Enterprise masterCGI Arbitrary Command Execution
    Disclosure Date: 2007-09-09
    First seen: 2020-04-26
    exploit/linux/http/alcatel_omnipcx_mastercgi_exec
    This module abuses a metacharacter injection vulnerability in the HTTP management interface of the Alcatel-Lucent OmniPCX Enterprise Communication Server 7.1 and earlier. The Unified Maintenance Tool contains a 'masterCGI' binary which allows an unauthenticated attacker to execute arbitrary commands by specifying shell metacharaters as the 'user' within the 'ping' action to obtain 'httpd' user access. This module only supports command line payloads, as the httpd process kills the reverse/bind shell spawn after the HTTP 200 OK response. Authors: - aushack <patrick@osisecurity.com.au>
1 metasploit modules found
Please note: Metasploit modules are only matched by CVE numbers. Visit metasploit web site for more details
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close