{"uuid": "b01c4711-907a-4f53-ba98-6c1fd6eb5e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-125124", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pandora_fms_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"xistence \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Pandora FMS 5.0RC1 and lower.\\n          It will leverage an unauthenticated command injection in the Anyterm service on\\n          port 8023/TCP. Commands are executed as the user \\\"pandora\\\". In Pandora FMS 4.1 and 5.0RC1\\n          the user \\\"artica\\\" is not assigned a password by default, which makes it possible to su\\n          to this user from the \\\"pandora\\\" user. The \\\"artica\\\" user has access to sudo without a\\n          password, which makes it possible to escalate privileges to root. However, Pandora FMS 4.0\\n          and lower force a password for the \\\"artica\\\" user during installation.\", \"disclosure_date\": \"2014-01-29\", \"fullname\": \"exploit/linux/http/pandora_fms_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Pandora FMS Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/pandora_fms_exec.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/pandora_fms_exec\", \"references\": [\"CVE-2014-125124\"], \"rport\": 8023, \"session_types\": false, \"targets\": [\"Pandora 5.0RC1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:50.686071Z"}