CVE-2012-6530
Sysax Multi Server < 5.52 - Authenticated Stack-Based Buffer Overflow via HTTP Request
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-6530.
PoCs published by Craig Freyman, Craig Freyman, Matt, Andreko, including Metasploit module exploits/windows/http/sysax_create_folder.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Sysax Multi Server 5.50 via the create folder function, leading to remote code execution. It automates the SID gathering process and targets Windows XP SP3 and Server 2003 SP2.
Description
Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted request.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in Sysax Multi Server 5.50 via the create folder function, leading to remote code execution. It automates the SID gathering process and targets Windows XP SP3 and Server 2003 SP2.
This exploit targets a buffer overflow vulnerability in Sysax Multi Server 5.50 via a malformed HTTP POST request to the 'mk_folder2_name1.htm' endpoint. It includes shellcode for a bind shell on port 4444 and is tailored for Windows XP SP3 and Server 2003 SP2 without DEP.
This Metasploit module exploits a stack buffer overflow in Sysax Multi Server 5.64 via the create folder function, achieving SYSTEM-level access on vulnerable Windows systems (XP SP3, Server 2003 SP1-SP2). It uses ROP chains for Windows 2003 targets and requires valid credentials.