PT-2019-6601 · Integard · Integard Home+1

Corelanc0D3R + 5 · Publicado 2019-09-13 · Atualizado 2024-02-14 · CVE-2010-5333

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Integard Pro versions prior to 2.0.0.9037 Integard Home versions prior to 2.0.0.9037 Integard Pro and Home versions 2.2.x prior to 2.2.0.9037

Description The web server has a buffer overflow via a long password in an administration login POST request, leading to arbitrary code execution. This issue can be exploited through an EIP-overwrite buffer overflow.

Recommendations For Integard Pro and Home versions prior to 2.0.0.9037, update to version 2.0.0.9037 or later. For Integard Pro and Home versions 2.2.x prior to 2.2.0.9037, update to version 2.2.0.9037 or later. As a temporary workaround, consider restricting access to the administration login POST request until a patch is available. Avoid using long passwords in the administration login until the issue is resolved.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2010-5333

Produtos afetados

Integard Home

Integard Pro

Referências · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/integard_password_bof.rb · Exploit
• 🔥 https://exploit-db.com/exploits/15016 · Exploit
• 🔥 https://exploit-db.com/exploits/14941 · Exploit
• https://github.com/purpl3-f0x/OSCE-prep/blob/master/eip_integard.py · Nota
• https://t.me/cibsecurity/6759 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2010-5333 · Nota de Segurança
• https://purpl3f0xsec.tech/2019/08/04/osce-prep-integard.html · Nota