CVE-2011-3587
EXPLOITEDPlone 4.0-4.0.9, 4.1, 4.2-4.2a2 - Remote Code Execution via p_ Class in OFS/misc_.py
Title source: manualExploitation Summary
CVE-2011-3587 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 2 public exploits from researchers including Nick Miles, Unknown, Nick Miles, including a Metasploit module exploits/multi/http/plone_popen2.
AI-analyzed exploit summary This exploit leverages a path traversal vulnerability in Plone's webdav/xmltools endpoint to execute arbitrary commands via the 'os.popen2' module. The PoC demonstrates command injection by exfiltrating '/etc/passwd' over a netcat connection.
Description
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.
Exploits (2)
This exploit leverages a path traversal vulnerability in Plone's webdav/xmltools endpoint to execute arbitrary commands via the 'os.popen2' module. The PoC demonstrates command injection by exfiltrating '/etc/passwd' over a netcat connection.
This Metasploit module exploits a remote command execution vulnerability in Plone and Zope via a traversal attack on the `p_` class in OFS/misc_.py, allowing arbitrary command execution through the `os/popen2` module. The exploit sends a POST request with the payload encoded in the `cmd` parameter.