CVE-2005-1272
BrightStor ARCserve Backup Agent for SQL Server 11.0 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-1272.
PoCs published by Metasploit, cybertronic, hdm, including Metasploit module exploits/windows/brightstor/sql_agent.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in CA BrightStor Agent for Microsoft SQL Server. It sends a maliciously crafted buffer to trigger the overflow and execute arbitrary code via a return address overwrite and jump to shellcode.
Description
Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.
Exploits (3)
This exploit targets a buffer overflow vulnerability in CA BrightStor Agent for Microsoft SQL Server. It sends a maliciously crafted buffer to trigger the overflow and execute arbitrary code via a return address overwrite and jump to shellcode.
This exploit targets a buffer overflow vulnerability in CA BrightStor ARCserve Backup Agent for SQL (dbasqlr.exe) on port 6070. It includes both bind and reverse shell payloads, leveraging a hardcoded return address (0x20c0c1ab) to achieve remote code execution.
This Metasploit module exploits a buffer overflow vulnerability in CA BrightStor Agent for Microsoft SQL Server (CVE-2005-1272). It sends a maliciously crafted buffer to trigger a stack-based overflow, leveraging a 'jmp esp' or similar instruction to redirect execution to the payload.