CVE-2009-0880
IBM Director < 5.20.3 - Remote Code Execution via CIM Server Path Traversal
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2009-0880.
PoCs published by Metasploit, Bernhard Mueller, kingcope, including Metasploit module exploits/windows/misc/ibm_director_cim_dllinject.
AI-analyzed exploit summary This Metasploit module exploits a DLL injection vulnerability in IBM System Director Agent 5.20.3 via WebDAV to achieve remote code execution with SYSTEM privileges. It leverages the WebClient service to deliver a malicious DLL payload.
Description
Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. (dot dot) in a /CIMListener/ URI in an M-POST request.
Exploits (4)
This Metasploit module exploits a DLL injection vulnerability in IBM System Director Agent 5.20.3 via WebDAV to achieve remote code execution with SYSTEM privileges. It leverages the WebClient service to deliver a malicious DLL payload.
This exploit targets a privilege escalation vulnerability in IBM Director's CIM server by sending a malformed XML payload via HTTP to trigger arbitrary code execution with elevated privileges. The PoC constructs a malicious CIM ExportIndication request to exploit the vulnerability.
This exploit leverages CVE-2009-0880 to force IBM System Director to load a DLL from a remote WebDAV share, achieving remote code execution. The PoC sends a crafted XML payload via HTTP to trigger the vulnerability.
This Metasploit module exploits a DLL injection vulnerability in IBM System Director Agent 5.20.3 by leveraging a WebDAV service to achieve arbitrary code execution with SYSTEM privileges. It handles WebDAV requests (OPTIONS, PROPFIND, GET) to serve a malicious DLL payload to the target.