CVE-1999-0209

This Metasploit module exploits a command injection vulnerability in Solaris ypupdated via RPC, allowing remote command execution as root by appending commands to a MAP UPDATE request.

This is a Metasploit module exploiting CVE-1999-0209, a command injection vulnerability in Solaris ypupdated. It sends a crafted MAP UPDATE request with a payload in the format '|<command>' to execute arbitrary commands as root.

This exploit leverages a vulnerability in SunView's selection_svc process, which persists after the user quits SunView, allowing remote systems to read files accessible to the last user who ran SunView. The PoC demonstrates how to hold a file for selection, enabling unauthorized file access.

This Metasploit module exploits a command injection vulnerability in Solaris ypupdated (CVE-1999-0209) by sending a malicious MAP UPDATE request via SunRPC, allowing arbitrary command execution as root.