AgentX++ Master AgentX::receive_agentx Stack Buffer Overflow

This exploits a stack buffer overflow in the AgentX++ library, as used by various applications. By sending a specially crafted request, an attacker can execute arbitrary code, potentially with SYSTEM privileges. This module was tested successfully against master.exe as included with Real Network\'s Helix Server v12. When installed as a service with Helix Server, the service runs as SYSTEM, has no recovery action, but will start automatically on boot. This module does not work with NX/XD enabled but could be modified easily to do so. The address

Search Other Modules

Exploit Rank

• Good

Exploit Authors

• jduck < jduck [at] metasploit.com >

Vulnerability References

• CVE-2010-1318
• OSVDB-63919
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=867

Exploit Targets

• 0 - Helix Server v12 and v13 - master.exe (default)

Exploit Development

• Source Code
• History

Similar Exploit Modules

• exploit/windows/misc/apple_quicktime_rtsp_response
• exploit/windows/misc/asus_dpcproxy_overflow
• exploit/windows/misc/avidphoneticindexer
• exploit/windows/misc/bakbone_netvault_heap
• exploit/windows/misc/bcaaa_bof
• exploit/windows/misc/bigant_server
• exploit/windows/misc/bigant_server_250
• exploit/windows/misc/bigant_server_usv
• exploit/windows/misc/bomberclone_overflow
• exploit/windows/misc/bopup_comm

Exploit Usage Information

Exploit Module Options