CVE-2015-5082
Endian Firewall < 2.5.1 - Remote Command Execution via Password Change Parameters
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2015-5082.
PoCs published by Metasploit, Ben Lincoln, including Metasploit module exploits/linux/http/efw_chpasswd_exec.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in Endian Firewall's proxy password change CGI script. It allows remote code execution as the 'nobody' user, which has sudo privileges to change the root password.
Description
Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW_PASSWORD_1 or (2) NEW_PASSWORD_2 parameter to cgi-bin/chpasswd.cgi.
Exploits (4)
This Metasploit module exploits a command injection vulnerability in Endian Firewall's proxy password change CGI script. It allows remote code execution as the 'nobody' user, which has sudo privileges to change the root password.
This Metasploit module exploits a command injection vulnerability in Endian Firewall's proxy password change CGI script, allowing remote code execution as the 'nobody' user, which can escalate to root via sudo permissions.
This exploit leverages a command injection vulnerability in Endian Firewall's proxy user password change CGI script to execute arbitrary commands, resulting in a reverse TCP shell. The exploit constructs a malicious HTTP POST request with a crafted payload in the password fields.
This Metasploit module exploits a command injection vulnerability in Endian Firewall's chpasswd.cgi script, allowing remote code execution as the 'nobody' user, which has sudo privileges to change the root password. The exploit leverages multipart form data to inject commands into the password change fields.