CVE-2005-3757
Google Mini Search Appliance - Remote Code Execution via XSLT Style Sheet Select Attribute
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-3757.
PoCs published by Metasploit, H D Moore, hdm, including Metasploit module exploits/unix/webapp/google_proxystylesheet_exec.
AI-analyzed exploit summary This Metasploit module exploits a vulnerability in the Saxon XSLT parser used by the Google Search Appliance, allowing arbitrary Java method calls via a crafted XSLT stylesheet. The exploit sets up an HTTP server to serve malicious XML data, triggering command execution on the target.
Description
The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as (1) system-property, (2) sys:getProperty, and (3) run:exec.
Exploits (3)
This Metasploit module exploits a vulnerability in the Saxon XSLT parser used by the Google Search Appliance, allowing arbitrary Java method calls via a crafted XSLT stylesheet. The exploit sets up an HTTP server to serve malicious XML data, triggering command execution on the target.
This exploit targets a vulnerability in the Google Search Appliance's Saxon XSLT parser, allowing arbitrary Java method execution via the ProxyStyleSheet feature. It sets up a local HTTP server to serve a malicious XSLT payload, which triggers command execution on the target appliance.
This Metasploit module exploits a feature in the Saxon XSLT parser used by the Google Search Appliance, allowing arbitrary Java method calls. It leverages the 'proxystylesheet' parameter to execute commands via a malicious XSLT file hosted by the attacker.