module
Oracle Endeca Server Remote Command Execution
| Disclosed | Created |
|---|---|
| 07/16/2013 | 05/30/2018 |
Disclosed
07/16/2013
Created
05/30/2018
Description
This module exploits a command injection vulnerability on the Oracle Endeca
Server 7.4.0. The vulnerability exists on the createDataStore method from the
controlSoapBinding web service. The vulnerable method only exists on the 7.4.0
branch and isn't available on the 7.5.5.1 branch. In addition, the injection
has been found to be Windows specific. This module has been tested successfully
on Endeca Server 7.4.0.787 over Windows 2008 R2 (64 bits).
Server 7.4.0. The vulnerability exists on the createDataStore method from the
controlSoapBinding web service. The vulnerable method only exists on the 7.4.0
branch and isn't available on the 7.5.5.1 branch. In addition, the injection
has been found to be Windows specific. This module has been tested successfully
on Endeca Server 7.4.0.787 over Windows 2008 R2 (64 bits).
Authors
rgod juan vazquez
Platform
Windows
Architectures
x64, x86
References
Module Options
To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:
msf > use exploit/windows/http/oracle_endeca_exec
msf /(c) > show actions
...actions...
msf /(c) > set ACTION < action-name >
msf /(c) > show options
...show and set options...
msf /(c) > run
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.