CVE-2012-6273

CVE-2012-6273 : BigAntSoft BigAnt IM Message Server is affected by an SQL injection vulnerability where a search-user (SHU) request is constructed with insufficient sanitization, allowing remote execution of arbitrary SQL commands. The issue is consistently described across sources as an injectio...

CVE-2012-6275

Summary: CVE-2012-6275 affects BigAntSoft BigAnt IM Message Server’s AntDS.exe, where a stack-based buffer overflow is triggered by handling the filename header in SCH requests or the userid field in DUPF requests. This can allow remote, unauthenticated attackers to influence the process, potenti...

CVE-2012-6273

SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote attackers to execute arbitrary SQL commands via an SHU aka search user request...

CVE-2012-6274

BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors...

CVE-2012-6274

BigAnt Server (BigAnt IM Message Server) is affected by CVE-2012-6274: an authentication bypass that permits remote unauthenticated file uploads to AntServer\DocData\Public via DUPF processing, with a reported directory-traversal weakness contributing to arbitrary file upload. Connected advisorie...

BigAnt Server 2.52 SP5 SEH Stack Overflow ROP-based exploit (ASLR + DEP bypass)

Exploit for windows platform in category remote exploits Exploit Title: BigAnt Server 2.52 SP5 SEH Stack Overflow ROP-based exploit ASLR + DEP bypass Date: 03/11/2012 Exploit Author: Lorenzo Cantoni Vendor Homepage: http://www.bigantsoft.com/ Version: BigAnt Console 2.52 SP5 Tested on: Windows 7...

Bigant Messenger 2.52 - 'AntCore.dll RegisterCom()' Remote Heap Overflow

!/usr/bin/python Bigant Messenger = v2.52 - AntCore.dll RegisterCom Remote 0day Heap Overflow Exploit Found by: Steven Seeley - mrme AT corelan.be - http://net-ninja.net/ Homepage: http://www.bigantsoft.com/ Download: http://www.bigantsoft.com/download.html Tested on: Windows XP SP3 IE 6 & 7 Mark...