CVE-2004-1172
Veritas Backup Exec 8.x-9.x - Stack-Based Buffer Overflow via Long Hostname in Agent Browser Registration
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2004-1172.
PoCs published by Metasploit, class101, hdm, including Metasploit module exploits/windows/backupexec/name_service.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Veritas Backup Exec's Name Service (CVE-2004-1172) by sending a maliciously crafted agent registration request. It uses a staged payload approach to bypass space constraints, first executing a small findsock shellcode to receive and execute the full payload.
Description
Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname.
Exploits (3)
This Metasploit module exploits a stack-based buffer overflow in Veritas Backup Exec's Name Service (CVE-2004-1172) by sending a maliciously crafted agent registration request. It uses a staged payload approach to bypass space constraints, first executing a small findsock shellcode to receive and execute the full payload.
This exploit targets a remote stack overflow in VERITAS Backup Exec Agent Browser Service (CVE-2004-1172). It uses a two-stage shellcode approach to achieve reliable exploitation across multiple Windows versions.
This Metasploit module exploits a stack-based buffer overflow in Veritas Backup Exec's Name Service (CVE-2004-1172) by sending a maliciously crafted agent registration request. It uses a two-stage payload: a small findsock stub to locate the socket and receive the full shellcode, followed by the actual payload execution.