PT-2013-1994 · Sysax · Sysax Multi Server

Craig · Published 2013-01-31 · Updated 2013-01-31 · CVE-2012-6530

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sysax Multi Server versions prior to 5.52

Description The issue is a stack-based buffer overflow that occurs when HTTP is enabled. It allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted request.

Recommendations For versions prior to 5.52, update to version 5.52 or later to resolve the issue. As a temporary workaround, consider disabling the HTTP functionality until a patch is available. Restrict access to the create folder permission to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-6530

Affected Products

Sysax Multi Server

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sysax_create_folder.rb · Exploit
• 🔥 http://exploit-db.com/exploits/18420 · Exploit
• 🔥 http://securityfocus.com/bid/51548 · Exploit
• 🔥 http://exploit-db.com/exploits/18382 · Exploit
• 🔥 https://exploit-db.com/exploits/18382 · Exploit
• 🔥 https://exploit-db.com/exploits/18420 · Exploit
• 🔥 http://pwnag3.com/2012/01/sysax-multi-server-550-exploit.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-6530 · Security Note