Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-3285. PoCs published by Jesus Olmos Gonzalez.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in the SmbClientParser Perl module by crafting a folder name with malicious commands. When the module processes this folder name, it executes arbitrary commands with the privileges of the user running the application.
Description
The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters.
Exploits (1)
This exploit leverages a command injection vulnerability in the SmbClientParser Perl module by crafting a folder name with malicious commands. When the module processes this folder name, it executes arbitrary commands with the privileges of the user running the application.