rapid7/metasploit-framework — pull request #2653 by Bruk0ut (2013-11-19 17:32:48+00:00)
Title: Add Module Intersystems Cache RCE

This module exploits default installations of Intersystems Cache which
use the 'minimal' initial security settings, unless changed during/post
installation. Anonymous users are granted permissions to '%All' roles
within Cache, allowing for remote code execution to be achieved by
creating a Cache SQL stored procedure which leverages the
'Cache Object Script' scripting engine to execute commands under
the context of SYSTEM for default windows installations, or non
privileged 'cacheserver' for default *nix installations.