FreeNAS exec_raw.php Arbitrary Command Execution

$Id: freenasexecraw.rb 11015 2010-11-12 23:14:46Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

FreeNAS Remote Shell Command Execution Vulnerability

FreeNAS is prone to a shell-command-execution vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit the remote shell-command-execution issue to execute arbitrary shell commands in the context of the webserver process. FreeNAS versions prior ...

FreeNAS Detection

This host is running FreeNAS, an embedded open source NAS Network-Attached Storage distribution based on FreeBSD. OpenVAS Vulnerability Test $Id: gbfreenasdetect.nasl 6701 2017-07-12 13:04:06Z cfischer $ FreeNAS Detection Authors: Michael Meyer Copyright: Copyright c 2010 Greenbone Networks GmbH...

FreeNAS Detection (HTTP)

Detection of FreeNAS. The script sends a connection request to the server and attempts to detect FreeNAS and to extract its version. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeNAS Remote Shell Command Execution Vulnerability

FreeNAS is prone to a shell-command-execution vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit the remote shell-command-execution issue to execute arbitrary shell commands in the context of the webserver process. FreeNAS versions prior ...

FreeNAS Web Detection

The administrative web interface for FreeNAS was detected on the remote host. FreeNAS is an open source network attached storage NAS distribution based on FreeBSD. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50509; scriptversion"1.9";...

FreeNAS 'exec_raw.php' Arbitrary Command Execution

The version of FreeNAS on the remote host fails to restrict access to its 'execraw.php' script. A remote, unauthenticated attacker can pass arbitrary commands through the script's 'cmd' parameter and have them executed with administrative privileges. %NASLMINLEVEL 70300 C Tenable Network Security...

FreeNAS exec_raw.php Arbitrary Command Execution

This module exploits an arbitrary command execution flaw in FreeNAS 0.7.2 use exploit/multi/http/freenas/execraw msf undefinedexecraw show actions ...actions... msf undefinedexecraw set ACTION msf undefinedexecraw show options ...show and set options... msf undefinedexecraw run This module requir...

CVE-2009-2738

Cross-site request forgery CSRF vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors...

CVE-2009-2739

Cross-site scripting XSS vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors...

CVE-2009-2739

Cross-site scripting XSS vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2009-2738

Cross-site request forgery CSRF vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors...

CVE-2009-2738

CVE-2009-2738 is a CSRF vulnerability affecting FreeNAS WebGUI prior to version 0.7RC1. The issue allows an attacker to hijack a user’s authenticated session and perform unspecified actions via forged requests, when the user is logged into the WebGUI, due to CSRF in the web interface. Public docu...

CVE-2009-2739

CVE-2009-2739 is a cross-site scripting (XSS) vulnerability in FreeNAS prior to 0.69.2. The issue allows remote attackers to inject arbitrary web script or HTML in the browser, via unknown vectors, potentially enabling script execution in the context of the affected user. Affected versions includ...

CVE-2009-2739

Cross-site scripting XSS vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2009-2739: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2009-2738: Improper Neutralization of Input During Web Page Generation

Cross-site request forgery CSRF vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors...

Cross-site request forgery vulnerability in FreeNAS

Overview FreeNAS contains a cross-site request forgery vulnerability. FreeNAS is a NAS Network Attached Storage server software. FreeNAS contains a cross-site request forgery vulnerability. Hiroyuki Shinshiba of LAC:Little eArth Corporation Co., LTD. reported this vulnerability to IPA. JPCERT/CC...