CVE-2012-1196
Lenovo ThinkManagement Console 9.0.3 - Path Traversal and Arbitrary File Deletion via VulCore Web Service
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-1196.
PoCs published by Metasploit, rgod, Andrea Micalizzi, juan vazquez, including Metasploit module exploits/windows/http/landesk_thinkmanagement_upload_asp.
AI-analyzed exploit summary This Metasploit module exploits CVE-2012-1196 in LANDesk Lenovo ThinkManagement Suite by uploading a malicious ASP script via a SOAP request, executing it to achieve remote command execution, and then deleting the script to cover tracks.
Description
Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. (dot dot) in the filename parameter in a SetTaskLogByFile SOAP request.
Exploits (3)
This Metasploit module exploits CVE-2012-1196 in LANDesk Lenovo ThinkManagement Suite by uploading a malicious ASP script via a SOAP request, executing it to achieve remote command execution, and then deleting the script to cover tracks.
This exploit targets a directory traversal vulnerability in LANDesk Lenovo ThinkManagement Suite 9.0.3, allowing arbitrary file deletion via the 'SetTaskLogByFile' method in WSVulnerabilityCore.dll. The PoC sends a crafted SOAP request to delete a specified file (e.g., 'ygrep32.dll') without authentication.
This Metasploit module exploits CVE-2012-1196 in LANDesk Lenovo ThinkManagement Suite by uploading a malicious ASP script via a crafted SOAP request, executing it, and then deleting it. It leverages the '-PutUpdateFileCore' command to achieve remote code execution.