CVE-2009-1429

This Metasploit module exploits a command injection vulnerability in Symantec System Center Alert Management System (xfr.exe) by sending a maliciously crafted packet to execute arbitrary commands on the target system.

This Metasploit module exploits a command injection vulnerability in Symantec System Center Alert Management System (xfr.exe) by sending a maliciously crafted packet to port 12174, allowing arbitrary command execution. It supports both direct command execution and a staged payload via TFTP.

This exploit targets a command injection vulnerability in Symantec's AMS2 component, allowing remote command execution with SYSTEM privileges via TCP port 12174. It includes multiple attack modes such as adding users, downloading/executing payloads, and testing connectivity.