CVE-2007-3010

This Metasploit module exploits a command injection vulnerability in Alcatel-Lucent OmniPCX Enterprise's masterCGI via shell metacharacters in the 'user' parameter of the 'ping' action. It sends a crafted HTTP GET request to execute arbitrary commands as the 'httpd' user.

This Metasploit module exploits a command injection vulnerability in Alcatel-Lucent OmniPCX Enterprise's masterCGI binary via the 'user' parameter in the 'ping' action. It sends a crafted HTTP GET request to execute arbitrary commands as the 'httpd' user.

This exploit leverages a command injection vulnerability in Alcatel-Lucent OmniPCX Enterprise by injecting arbitrary commands via the 'user' parameter in the 'masterCGI' endpoint. The provided curl command demonstrates executing 'ls -l' on the target system.

This Metasploit module exploits a command injection vulnerability in Alcatel-Lucent OmniPCX Enterprise's masterCGI via shell metacharacter injection in the 'user' parameter of the 'ping' action. It executes arbitrary commands as the 'httpd' user but is limited to command-line payloads due to process termination post-response.