CVE-2009-0880

This Metasploit module exploits a DLL injection vulnerability in IBM System Director Agent 5.20.3 via WebDAV to achieve remote code execution with SYSTEM privileges. It leverages the WebClient service to deliver a malicious DLL payload.

This exploit targets a privilege escalation vulnerability in IBM Director's CIM server by sending a malformed XML payload via HTTP to trigger arbitrary code execution with elevated privileges. The PoC constructs a malicious CIM ExportIndication request to exploit the vulnerability.

This exploit leverages CVE-2009-0880 to force IBM System Director to load a DLL from a remote WebDAV share, achieving remote code execution. The PoC sends a crafted XML payload via HTTP to trigger the vulnerability.

This Metasploit module exploits a DLL injection vulnerability in IBM System Director Agent 5.20.3 by leveraging a WebDAV service to achieve arbitrary code execution with SYSTEM privileges. It handles WebDAV requests (OPTIONS, PROPFIND, GET) to serve a malicious DLL payload to the target.