EMC CMCNE 11.2.1 - FileUploadController Remote Code Execution (Metasploit)

require 'msf/core' class MetasploitModule 'EMC CMCNE FileUploadController Remote Code Execution', 'Description' = %q This module exploits a fileupload vulnerability found in EMC Connectrix Manager Converged Network Edition MSFLICENSE, 'Author' = 'james fitts' , 'References' = 'ZDI', '13-279' ,...

EMC CMCNE Inmservlets.war FileUploadController 11.2.1 - Remote Code Execution (Metasploit)

require 'msf/core' class MetasploitModule 'EMC CMCNE Inmservlets.war FileUploadController Remote Code Execution', 'Description' = %q This module exploits a file upload vulnerability found in EMC Connectrix Manager Converged Network Edition 'james fitts' , 'License' = MSFLICENSE, 'References' =...

[security bulletin] HPSBHF02953 rev.1 - HP B-series SAN Network Advisor, Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04045640 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04045640 Version: 1 HPSBHF02953 rev....

ESA-2013-089: EMC Connectrix Manager Converged Network Edition Remote Code Execution Vulnerabilities

ESA-2013-089.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-089: EMC Connectrix Manager Converged Network Edition Remote Code Execution Vulnerabilities EMC Identifier: ESA-2013-089 CVE Identifier: CVE-2013-6810 Severity Rating: CVSS v2 Base Score: 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C...

EMC Connectrix Manager Converged Network Edition远程代码执行漏洞

Bugtraq ID:64242 CVE ID:CVE-2013-6810 EMC Connectrix是一款网络交换机解决方案，EMC Connectrix Manager提供Connectrix server的接口，可对设备进行管理和保护。 EMC Connectrix Manager不正确限制对某些Servlet的访问，允许远程攻击者利用漏洞提交特殊的请求，可获取敏感文件信息，操作数据或执行任意代码。 0 EMC Connectrix Manager 12.x 厂商补丁： EMC ----- EMC Connectrix Manager Converged Network...

CVE-2013-6810

CVE-2013-6810 is an exploitable remote code execution vulnerability in EMC Connectrix Manager Converged Network Edition (CMCNE) via the Inmservlets.war FileUploadController. The issue arises from unauthenticated file upload where a crafted filename can lead to arbitrary file uploads and remote co...