dnrops
/
metasploit-framework
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

automatic module_metadata_base.json update

This commit is contained in:
Metasploit 2019-04-01 16:24:03 -07:00
parent 1b6cd64016
commit 46535074f6
No known key found for this signature in database
GPG Key ID: CDFB5FA52007B954
1 changed files with 39 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
db/modules_metadata_base.json
View File

@ -68597,6 +68597,45 @@
"notes": {
}
},
"exploit_multi/misc/weblogic_deserialize_unicastref": {
"name": "Oracle Weblogic Server Deserialization RCE - RMI UnicastRef",
"full_name": "exploit/multi/misc/weblogic_deserialize_unicastref",
"rank": 600,
"disclosure_date": "2017-01-25",
"type": "exploit",
"author": [
"Andres Rodriguez",
"Jacob Baines",
"Aaron Soto"
],
"description": "An unauthenticated attacker with network access to the Oracle Weblogic Server T3\n interface can send a serialized object (sun.rmi.server.UnicastRef)\n to the interface to execute code on vulnerable hosts.",
"references": [
"CVE-2017-3248"
],
"platform": "Solaris,Unix,Windows",
"arch": "",
"rport": 7001,
"autofilter_ports": [
],
"autofilter_services": [
],
"targets": [
"Unix",
"Windows",
"Solaris"
],
"mod_time": "2019-04-01 17:57:28 +0000",
"path": "/modules/exploits/multi/misc/weblogic_deserialize_unicastref.rb",
"is_install_path": true,
"ref_name": "multi/misc/weblogic_deserialize_unicastref",
"check": false,
"post_auth": false,
"default_credential": false,
"notes": {
}
},
"exploit_multi/misc/wireshark_lwres_getaddrbyname": {
"name": "Wireshark LWRES Dissector getaddrsbyname_request Buffer Overflow",
"full_name": "exploit/multi/misc/wireshark_lwres_getaddrbyname",