CVE-2015-0779
Novell ZENworks Configuration Management < 11.3.2 - Remote Code Execution via UploadServlet uid Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2015-0779.
PoCs published by Metasploit, Pedro Ribeiro, including Metasploit module exploits/multi/http/zenworks_configuration_management_upload.
AI-analyzed exploit summary This Metasploit module exploits an unauthenticated file upload vulnerability in Novell ZENworks Configuration Management (CVE-2015-0779) by abusing directory traversal in the 'uid' parameter to deploy a malicious WAR file in the Tomcat webapps directory, achieving remote code execution.
Description
Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename parameter and WAR content in the POST data, a different vulnerability than CVE-2010-5323 and CVE-2010-5324.
Exploits (3)
This Metasploit module exploits an unauthenticated file upload vulnerability in Novell ZENworks Configuration Management (CVE-2015-0779) by abusing directory traversal in the 'uid' parameter to deploy a malicious WAR file in the Tomcat webapps directory, achieving remote code execution.
This exploit leverages a directory traversal vulnerability in Novell ZENworks Configuration Management 11.3.1 to upload a malicious WAR file, achieving remote code execution without authentication. The vulnerability is exploited via a POST request to the UploadServlet with a manipulated 'uid' parameter.
This Metasploit module exploits an unauthenticated file upload vulnerability in Novell ZENworks Configuration Management (ZCM) via directory traversal in the 'uid' parameter of the UploadServlet. It deploys a malicious WAR file to the Tomcat webapps directory, achieving remote code execution.