rapid7/metasploit-framework — pull request #4282 by pedrib (2014-11-30 00:15:05+00:00)
Title: Add exploit for CVE-2014-5445

This PR adds an exploit for CVE-2014-5445, a 0-day vulnerability in ManageEngine NetFlow Analyzer that allows an unauthenticated user to download any file in the system. This works on both Linux and Windows, and has been tested extensively with all vulnerable versions (8.6 to 10.2).

All that is left is to add the OSVDB ID and the full disclosure URL, and as usual those come up in 2 or 3 days max. I will push those when they come up, please have a look and let me know what you think.