Exploitation Summary
EIP tracks 4 public exploits for CVE-2009-4660.
PoCs published by hack4love, blake, war4uthor, including Metasploit module exploits/windows/misc/bigant_server_usv.
AI-analyzed exploit summary This exploit targets a SEH overwrite vulnerability in BigAnt Server 2.50. It sends a crafted GET request with a payload that includes shellcode, triggering remote code execution on Windows XP SP2.
Description
Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET request to TCP port 6660.
Exploits (4)
This exploit targets a SEH overwrite vulnerability in BigAnt Server 2.50. It sends a crafted GET request with a payload that includes shellcode, triggering remote code execution on Windows XP SP2.
This exploit targets a SEH overwrite vulnerability in BigAnt Server 2.50, delivering a bind shell payload via a crafted GET request. It leverages a known return address in vbajet32.dll to achieve remote code execution.
This repository contains two functional Python scripts exploiting a buffer overflow vulnerability in BigAnt Server via a crafted 'USV' command. The exploits use SEH overwrite techniques and a reverse shell payload to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in BigAnt Server 2.52 via a crafted USV command. The payload is XOR-encoded with 0x2a and leverages SEH overwrites for reliable remote code execution.