Description
This module exploits a stack buffer overflow in the MaxDB WebDBM service. This service is included with many recent versions of the MaxDB and SAPDB products. This particular module is capable of exploiting Windows systems through the use of an SEH frame overwrite. The offset to the SEH frame may change depending on where MaxDB has been installed, this module assumes a web root path with the same length as:
C:\Program Files\sdb\programs\web\Documents
Module options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use exploit/windows/http/maxdb/webdbm_get_overflowmsf undefined(webdbm_get_overflow) > show actions ...actions...msf undefined(webdbm_get_overflow) > set ACTION < action-name >msf undefined(webdbm_get_overflow) > show options ...show and set options...msf undefined(webdbm_get_overflow) > runPrioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub