CVE-2008-6508
Openfire < 3.6.0a - Unauthenticated Path Traversal via Admin Console URI
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-6508.
PoCs published by Metasploit, Andreas Kurtz, Andreas Kurtz, h0ng10, including Metasploit module exploits/multi/http/openfire_auth_bypass.
AI-analyzed exploit summary This Metasploit module exploits an authentication bypass vulnerability in Openfire's admin console to upload and execute a malicious plugin, achieving arbitrary Java code execution. It has been tested against Openfire 3.6.0a.
Description
Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a .. (dot dot) in a URI that matches the Exclude-Strings list, as demonstrated by a /setup/setup-/.. sequence in a URI.
Exploits (3)
This Metasploit module exploits an authentication bypass vulnerability in Openfire's admin console to upload and execute a malicious plugin, achieving arbitrary Java code execution. It has been tested against Openfire 3.6.0a.
This advisory details multiple vulnerabilities in Openfire Server <= 3.6.0a, including authentication bypass, SQL injection, and XSS. It provides technical descriptions and proof-of-concept examples for each vulnerability.
This Metasploit module exploits an authentication bypass vulnerability in Openfire's admin console to upload and execute a malicious plugin, achieving arbitrary Java code execution. It targets Openfire versions up to 3.6.0a.