Blue Coat Authentication and Authorization Agent (BCAAA) 5 Buffer Overflow

This module exploits a stack buffer overflow in process bcaaa-130.exe (port 16102), which comes as part of the Blue Coat Authentication proxy. Please note that by default, this exploit will attempt up to three times in order to successfully gain remote code execution (in some cases, it takes as many as five times). This can cause your activity to look even more suspicious. To modify the number of exploit attempts, set the ATTEMPTS option.

Search Other Modules

Exploit Rank

• Good

Exploit Authors

• Paul Harrington < >
• Travis Warren < >
• sinn3r < sinn3r [at] metasploit.com >

Vulnerability References

• OSVDB-72095
• https://kb.bluecoat.com/index?page=content&id=SA55
• http://seclists.org/bugtraq/2011/Jul/44

Exploit Targets

• 0 - BCAAA Version 5.4.6.1.54128 (default)

Exploit Development

• Source Code
• History

Similar Exploit Modules

• exploit/windows/misc/agentxpp_receive_agentx
• exploit/windows/misc/apple_quicktime_rtsp_response
• exploit/windows/misc/asus_dpcproxy_overflow
• exploit/windows/misc/avidphoneticindexer
• exploit/windows/misc/bakbone_netvault_heap
• exploit/windows/misc/bigant_server
• exploit/windows/misc/bigant_server_250
• exploit/windows/misc/bigant_server_usv
• exploit/windows/misc/bomberclone_overflow
• exploit/windows/misc/bopup_comm

Exploit Usage Information

Exploit Module Options