CVE-2007-6377
BadBlue < 2.72b - Remote Code Execution via PassThru Query String Overflow
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2007-6377.
PoCs published by Metasploit, Jacopo Cervini, Nicoslo, including Metasploit module exploits/windows/http/badblue_passthru.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in BadBlue's PassThru functionality (CVE-2007-6377). It crafts a malicious URI to trigger the vulnerability, leveraging SEH overwrites for arbitrary code execution.
Description
Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitrary code via a long query string.
Exploits (5)
This is a Metasploit module exploiting a stack buffer overflow in BadBlue's PassThru functionality (CVE-2007-6377). It crafts a malicious URI to trigger the vulnerability, leveraging SEH overwrites for arbitrary code execution.
This exploit targets a stack overflow vulnerability in BadBlue 2.72 via a maliciously crafted GET request to ext.dll. It uses a SEH overwrite technique with a Metasploit-generated win32_bind shellcode to achieve remote code execution.
The exploit demonstrates a buffer overflow in BadBlue's PassThru command via a crafted HTTP request, along with directory traversal and path disclosure vulnerabilities. It includes functional PoC code for remote exploitation.
This Metasploit module exploits a stack buffer overflow in BadBlue's PassThru functionality via a crafted URI. It uses SEH overwrites and a jump-back payload to achieve remote code execution.