DSquare Exploit Pack: D2SEC_CISCOIPM

Name| d2secciscoipm ---|--- CVE| CVE-2008-1157 Exploit Pack| D2ExploitPack Description| Cisco CiscoWorks Internetwork Performance Monitor Remote Command Execution Vulnerability Notes|...

CVE-2008-1157

CiscoWorks Internetwork Performance Monitor (IPM) 2.6 for Solaris and Windows contains a vulnerability where a process binds a command shell to a randomly chosen TCP port. Remote, unauthenticated users can connect to the open port and execute arbitrary commands (on Solaris as casuser, on Windows ...