7.1
CVSSv2

CVE-2012-6530

Published: 31/01/2013 Updated: 31/01/2013
CVSS v2 Base Score: 7.1 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 720
Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in Sysax Multi Server prior to 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted request.

Vulnerable Product Search on Vulmon Subscribe to Product

sysax multi server

sysax multi server 4.3

sysax multi server 4.5

Exploits

########################################################################################################## #Title: Sysax Multi Server 550 Create Folder Remote Code Exec BoF (MSF Module) #Author: Craig Freyman (@cd1zz) #Tested on: XP SP3 32bit and Server 2003 SP2 32bit(No DEP) #Notes: My original exploit => wwwexploit-dbcom/exploits/183 ...
#!/usr/bin/python ########################################################################################################## #Title: Sysax Multi Server 550 Create Folder BOF #Author: Craig Freyman (@cd1zz) #Tested on: XP SP3 32bit and Server 2003 SP2 32bit(No DEP) #Date Discovered: January 13, 2012 #Vendor Contacted: January 15, 2012 #Vendor Respo ...