CVE-2013-10036
HIGHBeetel Connection Manager PCW_BTLINDV1.0.0B04 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2013-10036.
PoCs published by metacom, metacom, wvu, including Metasploit module exploits/windows/fileformat/beetel_netconfig_ini_bof.
AI-analyzed exploit summary This exploit targets a SEH buffer overflow vulnerability in Beetel Connection Manager PCW_BTLINDV1.0.0B04. It crafts a malicious NetConfig.ini file with a structured payload including a jump, SEH overwrite, NOPs, and shellcode to achieve remote code execution.
Description
A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW_BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler (SEH), leading to arbitrary code execution when the application processes the file.
Exploits (2)
This exploit targets a SEH buffer overflow vulnerability in Beetel Connection Manager PCW_BTLINDV1.0.0B04. It crafts a malicious NetConfig.ini file with a structured payload including a jump, SEH overwrite, NOPs, and shellcode to achieve remote code execution.
This Metasploit module exploits a stack-based buffer overflow in Beetel Connection Manager by crafting a malicious NetConfig.ini file with an oversized UserName parameter. It leverages SEH overwrites and a p/p/r ROP chain to achieve remote code execution.
References (4)
Scores
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N