CVE-2009-4660

Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET request to TCP port 6660.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

62.71% chance of exploitation in the next 30 days, 99th percentile

Published

2010-03-03

Updated

2024-08-07

Proof-of-concept exploits (3)

• http://www.exploit-db.com/exploits/9673
• http://www.exploit-db.com/exploits/9690
• war4uthor/CVE-2009-46600★ · 2019-01-09

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/bigant_server_usv.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/9690
• https://www.exploit-db.com/exploits/9673

Security advisories

• http://secunia.com/advisories/36704
• http://www.vupen.com/english/advisories/2009/2679
• http://www.securityfocus.com/bid/36407

References

• CVE Record
• NVD entry

Related

• CVE-2003-0264
• CVE-2004-2271
• CVE-2007-1567
• CVE-2009-1324
• CVE-2009-1330
• CVE-2012-5106