Sign upLogin

rapid7/metasploit-framework

View on GitHub
Star
modules/exploits/windows/misc/bcaaa_bof.rb

Summary

Maintainability
B
4 hrs
Test Coverage

Method exploit has 63 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def exploit

    rop_gadgets = [
      # rop chain generated with mona.py
      0x7c346c0a,  # POP EAX # RETN (MSVCR71.dll)
Severity: Major
Found in modules/exploits/windows/misc/bcaaa_bof.rb - About 2 hrs to fix

    Method initialize has 43 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def initialize(info={})
    super(update_info(info,
      'Name'           => "Blue Coat Authentication and Authorization Agent (BCAAA) 5 Buffer Overflow",
      'Description'    => %q{
          This module exploits a stack buffer overflow in process bcaaa-130.exe (port 16102),
    Severity: Minor
    Found in modules/exploits/windows/misc/bcaaa_bof.rb - About 1 hr to fix

      There are no issues that match your filters.

      Category
      Status