CVE-2008-1365
Trend Micro OfficeScan Corporate Edition <= 7.3 Patch 3 - Stack-Based Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-1365.
PoCs published by Metasploit, Luigi Auriemma, toto, including Metasploit module exploits/windows/http/trendmicro_officescan.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in Trend Micro OfficeScan's cgiChkMasterPwd.exe, allowing remote code execution with SYSTEM privileges. It uses a crafted POST request to trigger the vulnerability and execute shellcode.
Description
Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long encrypted password, which triggers the overflow in (1) cgiChkMasterPwd.exe, (2) policyserver.exe as reachable through cgiABLogon.exe, and other vectors.
Exploits (3)
This exploit targets a stack buffer overflow in Trend Micro OfficeScan's cgiChkMasterPwd.exe, allowing remote code execution with SYSTEM privileges. It uses a crafted POST request to trigger the vulnerability and execute shellcode.
The provided text describes a buffer-overflow and denial-of-service vulnerability in Trend Micro OfficeScan Corporate Edition. It lacks actual exploit code but references a binary exploit available via a GitLab link.
This Metasploit module exploits a stack buffer overflow in Trend Micro OfficeScan's cgiChkMasterPwd.exe (CVE-2008-1365) to achieve remote code execution with SYSTEM privileges. It uses alphanumeric shellcode and a custom encoder to bypass bad character restrictions.