Exploitation Summary
EIP tracks 7 public exploits for CVE-2008-1914.
PoCs published by Metasploit, ryujin, MC, including Metasploit module exploits/windows/misc/bigant_server_250.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in BigAnt Server 2.50 SP1 via a maliciously crafted GET request. It leverages SEH overwrites to achieve remote code execution.
Description
Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arbitrary code via a long URI in a request to TCP port 6080. NOTE: some of these details are obtained from third party information.
Exploits (7)
This is a Metasploit module exploiting a stack buffer overflow in BigAnt Server 2.50 SP1 via a maliciously crafted GET request. It leverages SEH overwrites to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in BigAnt Server 2.2 by sending a crafted GET request with a long string to trigger an SEH overwrite, leading to arbitrary code execution.
This exploit targets a remote SEH overflow vulnerability in BigAnt Server 2.2, allowing unauthenticated remote code execution via a crafted GET request. The payload includes shellcode and a reverse shell setup.
This exploit targets a SEH overwrite vulnerability in BigAnt Server 2.50 by sending a crafted HTTP GET request with a payload that triggers a buffer overflow, leading to arbitrary code execution. The exploit uses a known SEH address from MFC42.DLL and includes shellcode for execution.
This exploit targets a SEH overwrite vulnerability in BigAnt Server 2.50, delivering a bind shell payload via a crafted GET request. It leverages a known p/p/r address in vbajet32.dll to achieve remote code execution on Windows XP SP3.
This Metasploit module exploits a stack buffer overflow in BigAnt Server 2.50 SP1 via a crafted GET request to port 6660, leveraging SEH overwrite for remote code execution. It includes multiple targets for different Windows versions and uses alphanumeric encoding to avoid bad characters.
This Metasploit module exploits a stack buffer overflow in BigAnt Server 2.2 by sending a crafted HTTP GET request with a long string to trigger arbitrary code execution. It uses SEH overwrites and alphanumeric encoding to bypass bad characters.