CVE-2012-1465
NetMechanica NetDecision < 4.5.1 - Denial of Service via Long URL
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2012-1465.
PoCs published by Metasploit, SecPod Research, Luigi Auriemma, sinn3r, including Metasploit module auxiliary/scanner/http/netdecision_traversal.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in NetDecision 4.5.1 HTTP Server by sending a maliciously crafted GET request with a long URI. The exploit leverages SEH overwrites to achieve remote code execution, requiring the victim to be interacting with the HttpSvr window.
Description
Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause a denial of service (application crash) via a long URL in an HTTP request. NOTE: some of these details are obtained from third party information.
Exploits (4)
This Metasploit module exploits a buffer overflow in NetDecision 4.5.1 HTTP Server by sending a maliciously crafted GET request with a long URI. The exploit leverages SEH overwrites to achieve remote code execution, requiring the victim to be interacting with the HttpSvr window.
This exploit sends a maliciously crafted HTTP GET request with an excessively long filename (1276 'A' characters) to trigger a denial-of-service condition in Netmechanica NetDecision HTTP Server version 4.5.1. The vulnerability arises from improper validation of long HTTP requests, causing the service to crash.
This Metasploit module exploits a directory traversal vulnerability in NetDecision's TrafficGrapherServer.exe service by using a sequence of '...\' to traverse directories and retrieve arbitrary files from the server.
This Metasploit module exploits a buffer overflow vulnerability in NetDecision 4.5.1 HTTP Server by sending a crafted HTTP GET request with a long URI to achieve remote code execution. The exploit leverages a SEH overwrite technique and requires the victim to be interacting with the HttpSvr window.