CVE-2013-4885
nmap < 6.40 - Arbitrary File Write via http-domino-enum-passwords.nse Script
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-4885. PoCs published by Piotr Duszynski.
AI-analyzed exploit summary This exploit leverages a vulnerability in Nmap's script engine to write arbitrary files via the 'domino-enum-passwords' script by manipulating the 'idpath' argument. It allows an attacker to write files with the permissions of the user running Nmap, potentially leading to full system compromise.
Description
The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences.
Exploits (1)
This exploit leverages a vulnerability in Nmap's script engine to write arbitrary files via the 'domino-enum-passwords' script by manipulating the 'idpath' argument. It allows an attacker to write files with the permissions of the user running Nmap, potentially leading to full system compromise.