CVE-2011-2653
Novell ZENworks Asset Management 7.5 - Remote Code Execution via rtrlet Directory Traversal
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-2653.
PoCs published by Metasploit, Unknown, juan vazquez, including Metasploit module exploits/windows/http/zenworks_assetmgmt_uploadservlet.
AI-analyzed exploit summary This Metasploit module exploits a path traversal vulnerability in Novell ZENworks Asset Management 7.5. It uploads a malicious WAR file outside the intended directory via the CatchFileServlet and triggers arbitrary code execution by accessing the uploaded JSP payload.
Description
Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute arbitrary code by uploading an executable file.
Exploits (2)
This Metasploit module exploits a path traversal vulnerability in Novell ZENworks Asset Management 7.5. It uploads a malicious WAR file outside the intended directory via the CatchFileServlet and triggers arbitrary code execution by accessing the uploaded JSP payload.
This Metasploit module exploits a path traversal vulnerability in Novell ZENworks Asset Management 7.5 via the CatchFileServlet to upload a malicious WAR file outside the intended directory, leading to arbitrary code execution.