7.5
CVSSv2

CVE-2010-2309

Published: 16/06/2010 Updated: 17/06/2010
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 770
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote malicious users to execute arbitrary code via a long GET request.

Vulnerable Product Search on Vulmon Subscribe to Product

evological evocam 3.6.6

evological evocam 3.6.7

Exploits

## # $Id: evocam_webserverrb 10617 2010-10-09 06:55:52Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' clas ...
#!/usr/bin/python # Exploit Title: OS X EvoCam Web Server Buffer Overflow Exploit 366 and 367 # Date: 1st June 2010 # Author: d1dn0t ( didnot __A-T__ mecom ) # Software Link: wwwpizzaorg/evocamdmg # Version: EvoCam 366 and 367 # Tested on: OS X 1058 Intel import socket import sys import struct from optparse import OptionParse ...
#!/usr/bin/python # EvoCam Web Server OSX 366 and 367 import socket import struct SHELL = ( "\xdb\xd2\x29\xc9\xb1\x27\xbf\xb1\xd5\xb6\xd3\xd9\x74\x24" "\xf4\x5a\x83\xea\xfc\x31\x7a\x14\x03\x7a\xa5\x37\x43\xe2" "\x05\x2e\xfc\x45\xd5\x11\xad\x17\x65\xf0\x80\x18\x8a\x71" "\x64\x19\x94\x75\x10\xdf\xc6\x27\x70\x88\xe6\xc5\x65\x14" "\x6f\x2a\ ...
## # $Id: ufo_airb 10617 2010-10-09 06:55:52Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Metasplo ...