Hans Persson Molly Multiple Remote Command Execution Vulnerabilities
BID:6007
Info
Hans Persson Molly Multiple Remote Command Execution Vulnerabilities
| Bugtraq ID: | 6007 |
| Class: | Unknown |
| CVE: |
CVE-2002-1536 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 18 2002 12:00AM |
| Updated: | Jul 11 2009 06:06PM |
| Credit: | Discovery credited to "guejez" <[email protected]>. |
| Vulnerable: |
Hans Persson Molly 0.5 |
| Not Vulnerable: | |
Discussion
Hans Persson Molly Multiple Remote Command Execution Vulnerabilities
It has been reported that a remote command execution vulnerability exists in Molly. By constructing a malicious request, it may be possible for a remote attacker to execute arbitrary commands, with the privileges of Molly.
The vulnerability exists in several files in the 'unusedplugins' folder as well as 'plugins/nslookup.pl'.
This issue was reported for Molly 0.5.
It has been reported that a remote command execution vulnerability exists in Molly. By constructing a malicious request, it may be possible for a remote attacker to execute arbitrary commands, with the privileges of Molly.
The vulnerability exists in several files in the 'unusedplugins' folder as well as 'plugins/nslookup.pl'.
This issue was reported for Molly 0.5.
Exploit / POC
Hans Persson Molly Multiple Remote Command Execution Vulnerabilities
There is no exploit code required.
There is no exploit code required.