{"uuid": "e4003fd4-99b2-4b1b-9cac-1e7322c803af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1892", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/mongod_native_helper.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"agix\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits the nativeHelper feature from spiderMonkey which allows\\n          remote code execution by calling it with specially crafted arguments. This module\\n          has been tested successfully on MongoDB 2.2.3 on Ubuntu 10.04 and Debian Squeeze.\", \"disclosure_date\": \"2013-03-24\", \"fullname\": \"exploit/linux/misc/mongod_native_helper\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MongoDB nativeHelper.apply Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/misc/mongod_native_helper.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"linux/misc/mongod_native_helper\", \"references\": [\"CVE-2013-1892\", \"OSVDB-91632\", \"BID-58695\", \"URL-http://blog.scrt.ch/2013/03/24/mongodb-0-day-ssji-to-rce/\"], \"rport\": 27017, \"session_types\": false, \"targets\": [\"Linux - mongod 2.2.3 - 32bits\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:17.952922Z"}