critical10.0Public exploit code
CVE-2015-5082
Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW_PASSWORD_1 or (2) NEW_PASSWORD_2 param…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Endian Firewall - Password Change Command Injection (Metasploit)2015-09-07 · remote · linux · Verified
- Endian Firewall < 3.0.0 - OS Command Injection (Metasploit)2015-06-29 · remote · cgi
- Endian Firewall < 3.0.0 - OS Command Injection2015-06-29 · remote · cgi
Impact
Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW_PASSWORD_1 or (2) NEW_PASSWORD_2 parameter to cgi-bin/chpasswd.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Endian Firewall | Endian Firewall | through 2.5.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/133469/Endian-Firewall-Proxy-Password-Change-Command-Injection.html
- http://www.rapid7.com/db/modules/exploit/linux/http/efw_chpasswd_exec
- https://www.exploit-db.com/exploits/37426/
- https://www.exploit-db.com/exploits/37428/
- https://www.exploit-db.com/exploits/38096/
- http://packetstormsecurity.com/files/133469/Endian-Firewall-Proxy-Password-Change-Command-Injection.html
- http://www.rapid7.com/db/modules/exploit/linux/http/efw_chpasswd_exec
- https://www.exploit-db.com/exploits/37426/
- https://www.exploit-db.com/exploits/37428/
- https://www.exploit-db.com/exploits/38096/