Race River Integard Home/Pro LoginAdmin Password Stack Buffer Overflow

This module exploits a stack buffer overflow in Race river's Integard Home/Pro internet content filter HTTP Server. Versions prior to 2.0.0.9037 and 2.2.0.9037 are vulnerable. The administration web page on port 18881 is vulnerable to a remote buffer overflow attack. By sending an long character string in the password field, both the structured exception handler and the saved extended instruction pointer are over written, allowing an attacker to gain control of the application and the underlying operating system remotely. The administration website service runs with SYSTEM privileges, and automatically restarts when it crashes.

Search Other Modules

Exploit Rank

• Great

Exploit Authors

• Lincoln < >
• Nullthreat < >
• rick2600 < >
• corelanc0d3r < peter.ve [at] corelan.be >
• jduck < jduck [at] metasploit.com >

Vulnerability References

• OSVDB-67909
• http://www.corelan.be:8800/advisories.php?id=CORELAN-10-061

Exploit Targets

• 0 - Automatic Targeting (default)
• 1 - Integard Home 2.0.0.9021
• 2 - Integard Pro 2.2.0.9026

Exploit Development

• Source Code
• History

Similar Exploit Modules

• exploit/windows/http/adobe_robohelper_authbypass
• exploit/windows/http/altn_securitygateway
• exploit/windows/http/altn_webadmin
• exploit/windows/http/amlibweb_webquerydll_app
• exploit/windows/http/apache_chunked
• exploit/windows/http/apache_mod_rewrite_ldap
• exploit/windows/http/apache_modjk_overflow
• exploit/windows/http/badblue_ext_overflow
• exploit/windows/http/badblue_passthru
• exploit/windows/http/bea_weblogic_jsessionid

Exploit Usage Information

Exploit Module Options