CVE-2018-8065
HIGHFlexense SyncBreeze Enterprise <10.6.24 - Memory Corruption
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2018-8065.
PoCs published by Ege Balci, EgeBalci, Ege Balci <[email protected]>, including Metasploit module auxiliary/dos/http/flexense_http_server_dos.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow vulnerability in Flexense HTTP Server by sending multiple HTTP requests with long Accept headers, causing a denial of service (DoS). The exploit checks for the vulnerable server version and then floods it with malformed packets.
Description
An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs.
Exploits (3)
This Metasploit module exploits a buffer overflow vulnerability in Flexense HTTP Server by sending multiple HTTP requests with long Accept headers, causing a denial of service (DoS). The exploit checks for the vulnerable server version and then floods it with malformed packets.
This repository contains a working proof-of-concept exploit for CVE-2018-8065, a denial-of-service vulnerability in Flexense HTTP Server <= 10.6.24. The exploit sends malformed HTTP requests with long header values to trigger a user-mode write access violation, crashing the server.
This Metasploit module exploits a Denial of Service (DoS) vulnerability in Flexense HTTP Server by sending HTTP requests with long header values, causing a user mode write access memory violation.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H