Description
A stack-based buffer overflow vulnerability exists in the built-in web interface of DiskBoss Enterprise versions 7.4.28, 7.5.12, and 8.2.14. The vulnerability arises from improper bounds checking on the path component of HTTP GET requests. By sending a specially crafted long URI, a remote unauthenticated attacker can trigger a buffer overflow, potentially leading to arbitrary code execution with SYSTEM privileges on vulnerable Windows hosts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Flexense | DiskBoss Enterprise | 7.4.28, 7.5.12, 8.2.14 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
DiskBoss Enterprise GET Buffer Overflow
exploit/windows/http/diskboss_get_bof
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- https://www.exploit-db.com/exploits/40869 exploit
- https://www.exploit-db.com/exploits/42395 exploit
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/diskboss_get_bof.rb exploit
- https://www.vulncheck.com/advisories/diskboss-enterprise-buffer-overflow-rce third-party-advisory