{"vulnerability": "CVE-2009-0695", "sightings": [{"uuid": "af2f5510-52f5-4ba2-9a34-577fe9f7f88d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0695", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:39.000000Z"}, {"uuid": "06e0c1a6-146a-4df9-8999-cb61c7e080d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0695", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:36.000000Z"}, {"uuid": "e39463ac-0d83-45e9-8346-5458c6ad6764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0695", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/wyse/hagent_untrusted_hsdata.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "a36e6bae-8c21-4c33-be22-80526e67d1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0695", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/9934", "content": "", "creation_timestamp": "2009-07-10T00:00:00.000000Z"}, {"uuid": "c62ad0a3-2f9e-4f0f-bba6-89856532886a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0695", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/wyse/hagent_untrusted_hsdata.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"kf \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits the Wyse Rapport Hagent service by pretending to\\n          be a legitimate server. This process involves starting both HTTP and\\n          FTP services on the attacker side, then contacting the Hagent service of\\n          the target and indicating that an update is available. The target will\\n          then download the payload wrapped in an executable from the FTP service.\", \"disclosure_date\": \"2009-07-10\", \"fullname\": \"exploit/multi/wyse/hagent_untrusted_hsdata\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 17:11:13 +0000\", \"name\": \"Wyse Rapport Hagent Fake Hserver Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/wyse/hagent_untrusted_hsdata.rb\", \"platform\": \"Linux,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/wyse/hagent_untrusted_hsdata\", \"references\": [\"CVE-2009-0695\", \"OSVDB-55839\", \"US-CERT-VU-654545\", \"URL-http://snosoft.blogspot.com/\", \"URL-http://www.theregister.co.uk/2009/07/10/wyse_remote_exploit_bugs/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Windows XPe x86\", \"Wyse Linux x86\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:29.134174Z"}]}