Oracle BeeHive 2 - 'voice-servlet processEvaluation()' Write File (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Oracle BeeHive 2 voice-servlet processEvaluation Vulnerability", 'Description' = %q This module exploits a vulnerability found in...

CVE-2010-4417

creationtimestamp| type| source ---|---|--- 2015-12-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38859 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/oraclebeehiveevaluation.rb 2025-02-06 03:13:40+00:0...

CVE-2010-4417

CVE-2010-4417 affects Oracle BeeHive (Services for Beehive) within Oracle Fusion Middleware 2.0.1.x. The vulnerability in the voice-servlet’s processEvaluation() can be exploited to write a malicious file onto the target and achieve remote code execution under SYSTEM, via how the evaluation param...