high7.5Public exploit code
CVE-2014-5073
vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDat…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VMTurbo Operations Manager 4.6 - 'vmtadmin.cgi' Remote Command Execution (Metasploit)2014-08-14 · remote · linux
Impact
vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmturbo | Operations Manager | through 4.6 Versions 4.0, 4.5 |
References
- NVD record
- CVE.org record
- http://disse.cting.org/2014/07/30/vmturbo-operation-manager-remote-command-execution/
- http://packetstormsecurity.com/files/127864/VMTurbo-Operations-Manager-4.6-vmtadmin.cgi-Remote-Command-Execution.html
- http://secunia.com/advisories/58880
- http://secunia.com/secunia_research/2014-8/
- http://www.exploit-db.com/exploits/34335
- http://www.osvdb.org/109572
- http://www.securityfocus.com/bid/69225
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95319
- http://disse.cting.org/2014/07/30/vmturbo-operation-manager-remote-command-execution/
- http://packetstormsecurity.com/files/127864/VMTurbo-Operations-Manager-4.6-vmtadmin.cgi-Remote-Command-Execution.html
- http://secunia.com/advisories/58880
- http://secunia.com/secunia_research/2014-8/
- http://www.exploit-db.com/exploits/34335
- http://www.osvdb.org/109572
- http://www.securityfocus.com/bid/69225
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95319