rapid7/metasploit-framework — pull request #522 by h0ng10 (2012-06-24 20:34:24+00:00)
Title: Exploit for CVE-2008-6508 (Openfire Auth bypass)

This module exploits a directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a .. (dot dot) in a URI that matches the Exclude-Strings list, as demonstrated by a /setup/setup-/.. sequence in a URI.

The module abuses this issue to upload a malicious plugin (JAR file) to the server. The malicious code is executed when the plugin is installed.