module
HP Client Automation Command Injection
Disclosed | Created |
---|---|
Jan 2, 2014 | May 30, 2018 |
Disclosed
Jan 2, 2014
Created
May 30, 2018
Description
This module exploits a command injection vulnerability on HP Client Automation, distributed
actually as Persistent Systems Client Automation. The vulnerability exists in the Notify
Daemon (radexecd.exe), which doesn't authenticate execution requests by default.
This module has been tested successfully on HP Client Automation 9.00 on Windows 2003 SP2
and CentOS 5.
actually as Persistent Systems Client Automation. The vulnerability exists in the Notify
Daemon (radexecd.exe), which doesn't authenticate execution requests by default.
This module has been tested successfully on HP Client Automation 9.00 on Windows 2003 SP2
and CentOS 5.
Authors
Ben Turner
juan vazquez juan.vazquez@metasploit.com
juan vazquez juan.vazquez@metasploit.com
Platform
Unix,Windows
References
Module Options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.