Sambar 6 Search Results Buffer Overflow

This module exploits a buffer overflow found in the /search/results.stm application that comes with Sambar 6. This code is a direct port of Andrew Griffiths's SMUDGE exploit, the only changes made were to the nops and payload. This exploit causes the service to die, whether you provided the corre...

Sambar Server 6 - Search Results Buffer Overflow (Metasploit)

$Id: sambar6searchresults.rb 8480 2010-02-13 20:15:19Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2004-2086

creationtimestamp| type| source ---|---|--- 2010-02-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16756 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sambar6searchresults.rb 2025-02-06 03:13:38+00:00|...

CVE-2004-2086

CVE-2004-2086 affects Sambar Server prior to 6.0, with a stack-based buffer overflow in /search/results.stm that can be triggered by an HTTP POST containing a long query parameter, leading to denial of service and potential code execution. Public references in connected docs show exploit activity...