CVE-2012-6530

Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted request.

CVSS v2.0

7.1 HIGHAV:N/AC:H/Au:S/C:C/I:C/A:C

EPSS

46.07% chance of exploitation in the next 30 days, 99th percentile

Published

2013-01-31

Updated

2024-09-17

Proof-of-concept exploits (3)

• http://www.pwnag3.com/2012/01/sysax-multi-server-550-exploit.html
• http://www.exploit-db.com/exploits/18382
• http://www.exploit-db.com/exploits/18420

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sysax_create_folder…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/18420
• https://www.exploit-db.com/exploits/18382

References

• CVE Record
• NVD entry

Related

• CVE-2012-6529
• CVE-2012-6533
• CVE-2012-6528
• CVE-2012-6534
• CVE-2012-6526
• CVE-2012-6550