CVE-2013-1892
MongoDB < 2.0.9 and 2.2.x < 2.2.4 - Authenticated Remote Code Execution via nativeHelper Function
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2013-1892.
PoCs published by agix, Metasploit, including Metasploit module exploits/linux/misc/mongod_native_helper.
AI-analyzed exploit summary This exploit leverages the nativeHelper.apply feature in MongoDB's Spidermonkey JavaScript engine to execute arbitrary shellcode. It constructs a malicious JavaScript payload that triggers remote code execution by exploiting improper input validation in the $where clause.
Description
MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service (invalid memory access and server crash) or execute arbitrary code via a crafted memory address in the first argument.
Exploits (3)
This exploit leverages the nativeHelper.apply feature in MongoDB's Spidermonkey JavaScript engine to execute arbitrary shellcode. It constructs a malicious JavaScript payload that triggers remote code execution by exploiting improper input validation in the $where clause.
This Metasploit module exploits CVE-2013-1892 in MongoDB's nativeHelper.apply function to achieve remote code execution via heap spraying and ROP chain manipulation. It targets MongoDB 2.2.3 on Linux systems.
This Metasploit module exploits a remote code execution vulnerability in MongoDB's nativeHelper.apply function via a crafted JavaScript payload and ROP chain. It targets MongoDB 2.2.3 on Linux systems.