CVE-2011-0807
Oracle Sun GlassFish Enterprise Server <3.0.1 - Info Disclosure
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2011-0807.
PoCs published by Metasploit, juan vazquez, including Metasploit module auxiliary/scanner/http/glassfish_login.
AI-analyzed exploit summary This Metasploit module exploits CVE-2011-0807 by authenticating to a vulnerable GlassFish Server instance and deploying a malicious WAR file to achieve remote code execution. It supports multiple versions of GlassFish and Sun Java System Application Server, with options for both authenticated and unauthenticated exploitation via HTTP verb manipulation.
Description
Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.
Exploits (3)
This Metasploit module exploits CVE-2011-0807 by authenticating to a vulnerable GlassFish Server instance and deploying a malicious WAR file to achieve remote code execution. It supports multiple versions of GlassFish and Sun Java System Application Server, with options for both authenticated and unauthenticated exploitation via HTTP verb manipulation.
This Metasploit module is a brute-force utility for GlassFish admin console authentication, checking for weak credentials and an older authentication bypass vulnerability. It does not contain offensive payloads but scans for valid login combinations.
This Metasploit module exploits an authenticated code execution vulnerability in Oracle/Sun GlassFish Server by deploying a malicious WAR file. It supports multiple versions (2.x, 3.x, 4.x, and 9.x) and includes auto-targeting based on detected platform and architecture.