{"uuid": "d9026c23-25f1-4454-9a11-f362f1e4d30c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-125113", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/dell_kace_k1000_upload.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Bradley Austin (steponequit)\", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a file upload vulnerability in Kace K1000\\n          versions 5.0 to 5.3, 5.4 prior to 5.4.76849 and 5.5 prior to 5.5.90547\\n          which allows unauthenticated users to execute arbitrary commands\\n          under the context of the 'www' user.\\n\\n          This module also abuses the 'KSudoClient::RunCommandWait' function\\n          to gain root privileges.\\n\\n          This module has been tested successfully with Dell KACE K1000\\n          version 5.3.\", \"disclosure_date\": \"2014-03-07\", \"fullname\": \"exploit/unix/http/dell_kace_k1000_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:31 +0000\", \"name\": \"Dell KACE K1000 File Upload\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/http/dell_kace_k1000_upload.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/http/dell_kace_k1000_upload\", \"references\": [\"CVE-2014-125113\", \"URL-http://console-cowboys.blogspot.com/2014/03/the-curious-case-of-ninjamonkeypiratela.html\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic Targeting\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:35.350995Z"}