CVE-2007-4880

This Metasploit module exploits a stack buffer overflow in IBM Tivoli Storage Manager Express CAD Service (5.3.3) via an overly long GET request. It leverages a hardcoded return address in dbghelp.dll to execute arbitrary payloads.

This exploit targets a buffer overflow vulnerability in IBM Tivoli Storage Manager Express CAD Service 5.3. It sends a crafted HTTP request with a malicious payload to trigger a bind shell on port 4444.

This Metasploit module exploits a stack buffer overflow in IBM Tivoli Storage Manager Express CAD Service (5.3.3) via an overly long GET request, allowing arbitrary code execution. It uses a known return address in dbghelp.dll and includes a payload with specific bad character exclusions.