IBM Tivoli Storage Manager Express RCA Service Buffer Overflow

This module exploits a stack buffer overflow in the IBM Tivoli Storage Manager Express Remote Client Agent service. By sending a "dicuGetIdentify" request packet containing a long NodeName parameter, an attacker can execute arbitrary code. NOTE: this exploit first connects to the CAD service to start the RCA service and obtain the port number on which it runs. This service does not restart.

Search Other Modules

Exploit Rank

• Great

Exploit Authors

• jduck < jduck [at] metasploit.com >

Vulnerability References

• CVE-2008-4828
• OSVDB-54232
• BID-34803

Exploit Targets

• 0 - IBM Tivoli Storage Manager Express 5.3.6.2 (default)

Exploit Development

• Source Code
• History

Similar Exploit Modules

• exploit/windows/misc/agentxpp_receive_agentx
• exploit/windows/misc/apple_quicktime_rtsp_response
• exploit/windows/misc/asus_dpcproxy_overflow
• exploit/windows/misc/avidphoneticindexer
• exploit/windows/misc/bakbone_netvault_heap
• exploit/windows/misc/bcaaa_bof
• exploit/windows/misc/bigant_server
• exploit/windows/misc/bigant_server_250
• exploit/windows/misc/bigant_server_usv
• exploit/windows/misc/bomberclone_overflow

Exploit Usage Information

Exploit Module Options