CVE-2005-0581
CA License Client and Server 0.1.0.15 - Multiple Buffer Overflow via GCR Request and GETCONFIG Packet
Title source: llmExploitation Summary
EIP tracks 7 public exploits for CVE-2005-0581.
PoCs published by Metasploit, hdm, aushack, MC, including Metasploit module exploits/windows/license/calicclnt_getconfig.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in CA BrightStor ARCserve Backup 11.0 via a crafted request to the lic98rmtd.exe service on port 10202. It achieves remote code execution by overflowing the buffer with a payload containing a return address and shellcode.
Description
Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the Checksum item in a GCR request, (2) a long IP address, hostname, or netmask values in a GCR request, (3) a long last parameter in a GETCONFIG packet, or (4) long values in a request with an invalid format.
Exploits (7)
This is a Metasploit module exploiting a stack buffer overflow in CA BrightStor ARCserve Backup 11.0 via a crafted request to the lic98rmtd.exe service on port 10202. It achieves remote code execution by overflowing the buffer with a payload containing a return address and shellcode.
This Metasploit module exploits a stack-based buffer overflow in the CA License Server via an excessively long GETCONFIG packet, allowing remote code execution on vulnerable Windows systems.
This exploit targets a buffer overflow vulnerability in the Computer Associates License Client service (CVE-2005-0581). It sends a maliciously crafted GETCONFIG request to trigger the overflow and execute arbitrary payloads on vulnerable Windows systems.
This exploit targets a stack overflow vulnerability in Computer Associates License Service (CVE-2005-0581). It includes shellcode for a reverse shell and supports multiple Windows versions by using different return addresses to bypass stack protections.
This Metasploit module exploits a buffer overflow vulnerability in the CA License Client service (CVE-2005-0581) by sending a maliciously crafted GETCONFIG request. It leverages a fake CA License Server to trigger the overflow and achieve remote code execution on vulnerable Windows systems.
This Metasploit module exploits a stack-based buffer overflow in the CA License Server via a malformed GETCONFIG packet, allowing remote code execution on vulnerable Windows systems.
This Metasploit module exploits a stack buffer overflow in CA BrightStor ARCserve Backup 11.0 via a crafted request to the lic98rmtd.exe service on port 10202. It leverages a JMP ESP instruction to execute arbitrary payloads, with bad character restrictions and stack adjustments for reliability.