CVE-2023-28502
CRITICALRocket Software UniData <8.2.4-11.3.5-12.2.1 - RCE
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-28502.
PoCs published by Ron Bowes, including Metasploit module exploits/linux/misc/unidata_udadmin_password_stack_overflow.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Rocket Software UniData's udadmin_server (CVE-2023-28502) by overflowing the password field during authentication, allowing arbitrary command execution as root. The exploit targets UniData 8.2.4 and leverages a return-to-libc technique to execute system commands.
Description
Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow in the "udadmin" service that can lead to remote code execution as the root user.
Exploits (1)
This Metasploit module exploits a stack-based buffer overflow in Rocket Software UniData's udadmin_server (CVE-2023-28502) by overflowing the password field during authentication, allowing arbitrary command execution as root. The exploit targets UniData 8.2.4 and leverages a return-to-libc technique to execute system commands.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H