the internet's gray area

Register | Login

FilesNewsUsersAuthors

Home Files News About Contact Add New

Showing 1 - 1 of 1

Files

Java RMIConnectionImpl Deserialization Privilege Escalation Exploit

Posted Sep 9, 2010

Authored by egypt, Matthias Kaiser, Sami Koivu | Site metasploit.com

This Metasploit module exploits a vulnerability in the Java Runtime Environment that allows to deserialize a MarshalledObject containing a custom classloader under a privileged context. The vulnerability affects version 6 prior to update 19 and version 5 prior to update 23.

tags | exploit, java

advisories | CVE-2010-0094

MD5 | 0d92c0d644f75f48c339916b902897e1

Download | Favorite | Comments (0)