CVE-2010-5333
CRITICALIntegard Pro/Home <2.0.0.9037 & 2.2.x <2.2.0.9037 - RCE
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2010-5333.
PoCs published by Lincoln_ Nullthreat_ rick2600, Node, Lincoln, Nullthreat, rick2600, including Metasploit module exploits/windows/http/integard_password_bof.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow vulnerability in Integard Home/Pro HTTP Server. It uses SEH overwrites and a reverse shell payload to achieve remote code execution.
Description
The web server in Integard Pro and Home before 2.0.0.9037 and 2.2.x before 2.2.0.9037 has a buffer overflow via a long password in an administration login POST request, leading to arbitrary code execution. An SEH-overwrite buffer overflow already existed for the vulnerable software. This CVE is to track an alternate exploitation method, utilizing an EIP-overwrite buffer overflow.
Exploits (3)
This is a Metasploit module exploiting a buffer overflow vulnerability in Integard Home/Pro HTTP Server. It uses SEH overwrites and a reverse shell payload to achieve remote code execution.
This is a Metasploit module exploiting a stack buffer overflow in Race River Integard Pro 2.2.0.9026 via a long password field in the admin login page. It uses ROP techniques to bypass DEP and achieve remote code execution on Windows 7 x64.
This Metasploit module exploits a stack buffer overflow in Race River Integard Home/Pro HTTP Server via a long password field in the LoginAdmin endpoint. It overwrites SEH and EIP to achieve remote code execution with SYSTEM privileges.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H