| Email address | private |
|---|---|
| First Active | 2011-01-14 |
| Last Active | 2012-04-04 |
Sysax Multi Server versions 5.57 and below remote directory traversal tool that requires authentication.
8015e6c77bca5ceabb2d04bd597627ffThis Metasploit module exploits a vulnerability found in Sysax's SSH service. By supplying a long username, the SSH server will copy that data on the stack without any proper bounds checking, therefore allowing remote code execution under the context of the user. Please note that previous versions (before 5.53) are also affected by this bug.
2e6c4b3c09156f6867a5e4b79066ef1dSysax Multi Server versions 5.53 and below SSH username buffer overflow pre-authentication remote code execution exploit with egghunter shellcode that binds a shell to port 4444.
efa4237db0195980bc7a8d07b894b4a8Sysax Multi Server version 5.53 SFTP post authentication SEH exploit with egghunter shellcode that binds a shell to port 4444.
9ebc939a18d9148892f51f798563dd37Sysax Multi Server version 5.52 and below file rename buffer overflow exploit with egghunter shellcode that spawns a shell on port 4444.
1dd807e4d7167fce435808be2c8b9c29Campaign Enterprise version 11.0.421 suffers from a remote SQL injection vulnerability.
ec20548ba9402a347c1329c29fcf022cThis Metasploit module exploits a stack buffer overflow in the create folder function in Sysax Multi Server 5.50. This issue was fixed in 5.52. You must have valid credentials to trigger the vulnerability. Your credentials must also have the create folder permission and the HTTP option has to be enabled. This Metasploit module will log into the server, get your a SID token and then proceed to exploit the server. Successful exploits result in LOCALSYSTEM access. This exploit works on XP and 2003.
b7e1d50d58ac543b487151a13f38d70dSysax Multi Server version 5.50 create folder buffer overflow exploit with bindshell code for port 4444.
31d14c0cc8f4763ef8a59ac26a9f9443LiteServe version 2.81 PASV command denial of service proof of concept exploit.
a967d9ca91be1d3306e91dc9b8044a41Proof of concept denial of service exploit for the Omnicom Alpha 4.0e LPD server.
dd68d531a79c9c3963e76fe90542b16fCiscokits version 1.0 TFTP long filename denial of service exploit.
9d6b916a2ea38d519148b5d8c7384054FreeFloat FTP version 1.0 any non implemented command buffer overflow exploit.
2ae54631644ea4e1d56f08d1dd01bc57Freefloat FTP version 1.0 ABOR buffer overflow exploit.
2e14b23a633580ff1cb712a88c328ba2Solar FTP version 2.1.1 PASV command proof of concept buffer overflow exploit.
5a1a4d5a622950c5d1bd20c26bc8d4aaAvaya IP Office Manager version 8.1 TFTP denial of service exploit.
4619ae971704a116d90106dccebd502bGolden FTP Server version 4.70 PASS command buffer overflow exploit.
1745a509aea8546e1c2c63a8c1190ffeBlackmoon FTP version 3.1 build 1735,1736 denial of service exploit.
91d06b7cc606a36b669c148d1e27793d
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed