auxiliary/admin/edirectory/edirectory_dhost_cookie

functional

Novell eDirectory DHOST Predictable Session Cookie

view exploit source metasploittype auxiliarycatalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2009-4655US	high7.5	50.5% (99th)	Exploit	2010-02-26
The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.