Supermicro X9 Buffer Overflow Scanner

Supermicro X9 generation motherboards before SMT X9 317 overflow scanner that checks for two flaws that date back to 2013 related to IPMI. ============================================================================================================================================= | Title :...

Supermicro Onboard IPMI close_window.cgi Buffer Overflow

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = GoodRanking include Msf::Exploit::Remote::HttpClient def initializeinfo...

CVE-2013-3623

Multiple stack-based buffer overflows in cgi/closewindow.cgi in the web interface in the Intelligent Platform Management Interface IPMI with firmware before 3.15 SMTX9315 on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the 1 sesssid or 2 ACT parameter...

CVE-2013-3623

CVE-2013-3623 affects Supermicro IPMI on X9 generation motherboards (web interface close_window.cgi). Affected firmware is before 3.15 (SMT_X9_315); the issue is a stack-based buffer overflow that allows remote code execution via parameters sess_sid or ACT. Public details in NVD, and exploits/poC...

CVE-2013-3623

creationtimestamp| type| source ---|---|--- 2013-11-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29666 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/smtipmiclosewindowbof.rb 2018-05-29 15:50:33+00:00|...

Supermicro Onboard IPMI - 'close_window.cgi' Remote Buffer Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Supermicro Onboard IPMI closewindow.cgi Buffer Overflow', 'Description' = %q This module exploits a buffer overflow on the Supermicro...

Supermicro Onboard IPMI close_window.cgi Buffer Overflow Vulnerability

This Metasploit module exploits a buffer overflow on the Supermicro Onboard IPMI controller web interface. The vulnerability exists on the closewindow.cgi CGI application, and is due to the insecure usage of strcpy. In order to get a session, the module will execute system from libc with an...

Supermicro Onboard IPMI close_window.cgi Buffer Overflow

This module exploits a buffer overflow on the Supermicro Onboard IPMI controller web interface. The vulnerability exists on the closewindow.cgi CGI application, and is due to the insecure usage of strcpy. In order to get a session, the module will execute system from libc with an arbitrary CMD...