CVE-2012-0202
IBM Cognos TM1 9.4.x-9.5.x - Remote Code Execution via Crafted Data
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-0202.
PoCs published by Metasploit, Unknown, juan vazquez, including Metasploit module exploits/windows/misc/ibm_cognos_tm1admsd_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in IBM Cognos tm1admsd.exe via a crafted TCP request, achieving remote code execution. It leverages a SEH overwrite and a short jump to bypass length restrictions.
Description
Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted data.
Exploits (2)
This Metasploit module exploits a stack buffer overflow in IBM Cognos tm1admsd.exe via a crafted TCP request, achieving remote code execution. It leverages a SEH overwrite and a short jump to bypass length restrictions.
This Metasploit module exploits a stack buffer overflow in IBM Cognos tm1admsd.exe via a crafted TCP request, achieving remote code execution. The exploit leverages a dangerous memcpy operation without proper length validation.