high7.5Public exploit code
CVE-2007-6377
Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitrary code via a long …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BadBlue 2.72b - PassThru Buffer Overflow (Metasploit)2010-07-08 · remote · windows · Verified
- BadBlue 2.72 - PassThru Remote Buffer Overflow2007-12-24 · remote · windows · Verified
- BadBlue 2.72b - Multiple Vulnerabilities2007-12-10 · remote · windows · Verified
Impact
Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitrary code via a long query string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Badblue | Badblue | through 2.72b |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/badblue-adv.txt
- http://aluigi.altervista.org/poc/badbluebof.txt
- http://osvdb.org/42416
- http://secunia.com/advisories/28031
- http://securityreason.com/securityalert/3448
- http://www.securityfocus.com/archive/1/484834/100/0/threaded
- http://www.securityfocus.com/bid/26803
- http://www.vupen.com/english/advisories/2007/4160
- https://www.exploit-db.com/exploits/4784
- http://aluigi.altervista.org/adv/badblue-adv.txt
- http://aluigi.altervista.org/poc/badbluebof.txt
- http://osvdb.org/42416
- http://secunia.com/advisories/28031
- http://securityreason.com/securityalert/3448
- http://www.securityfocus.com/archive/1/484834/100/0/threaded
- http://www.securityfocus.com/bid/26803
- http://www.vupen.com/english/advisories/2007/4160
- https://www.exploit-db.com/exploits/4784