exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

OSVDB: OSVDB-70546

Oracle Database Client System Analyzer Arbitrary File Upload

Posted Nov 15, 2012

Authored by juan vazquez, 1c239c43f521145fa8385d64a9c32243 | Site metasploit.com

This Metasploit module exploits an arbitrary file upload vulnerability on the Client Analyzer component as included in Oracle Database 11g, which allows remote attackers to upload and execute arbitrary code. This Metasploit module has been tested successfully on Oracle Database 11g 11.2.0.1.0 on Windows 2003 SP2, where execution through the Windows Management Instrumentation service has been used.

tags | exploit, remote, arbitrary, file upload

systems | windows

advisories | CVE-2010-3600, OSVDB-70546

SHA-256 | 84145a2bd1465f746c9f1fb3cb57ffe9811d8c12fa296a6bdabb07a13010b2ad

Download | Favorite | View