rapid7/metasploit-framework — pull request #651 by bcoles (2012-07-29 16:34:03+00:00)
Title: Add Zenoss <= 3.2.1 exploit and Python payload

- modules/exploits/linux/http/zenoss_3.2.1_showdaemonxmlconfig_exec.rb
- modules/payloads/singles/cmd/unix/reverse_python.rb

Product: Zenoss <= 3.2.1
Homepage: http://www.zenoss.com/
Advisory: http://itsecuritysolutions.org/2012-07-30-zenoss-3.2.1-multiple-security-vulnerabilities/

Zenoss 3.2.1 is distributed as a Virtual Machine image based on
CentOS 2.6.18-164.el5.

The telnet binary is not available so the default payload
`cmd/unix/reverse' will not work.

These payloads will work in the default Zenoss environment:

cmd/unix/bind_perl
cmd/unix/reverse_bash
cmd/unix/reverse_perl
cmd/unix/reverse_python
generic/custom
generic/shell_reverse_tcp