Exploitation Summary
EIP tracks 4 public exploits for CVE-2009-3999.
PoCs published by Metasploit, AC8999, afifudinmtop, including Metasploit module exploits/windows/http/hp_power_manager_filename.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in HP Power Manager's 'formExportDataLogs' via a malformed 'fileName' parameter, leading to arbitrary remote code execution under the context of 'SYSTEM'. It uses an egghunter technique to locate and execute the payload.
Description
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter.
Exploits (4)
This Metasploit module exploits a stack-based buffer overflow in HP Power Manager's 'formExportDataLogs' via a malformed 'fileName' parameter, leading to arbitrary remote code execution under the context of 'SYSTEM'. It uses an egghunter technique to locate and execute the payload.
This repository contains a functional Python 3 exploit for CVE-2009-3999, targeting a buffer overflow in HP Power Manager 4.2 Build 7. The exploit uses an egghunter and dynamically generated shellcode via msfvenom to achieve remote code execution.
This repository contains a functional exploit for CVE-2009-3999, targeting a buffer overflow in HP Power Manager 4.2 (Build 7). The exploit uses a reverse shell payload generated via msfvenom and leverages an egghunter to locate the shellcode in memory.
This Metasploit module exploits a stack-based buffer overflow in HP Power Manager's 'formExportDataLogs' via a malformed 'fileName' parameter, leading to arbitrary remote code execution under the context of 'SYSTEM'. It uses an egghunter technique to locate and execute the payload.