deardaniel/secdata-raw huggingface dataset:
Metasploit Module: War-FTPD 1.65 Username Overflow
Type: exploit
Path: modules/exploits/windows/ftp/warftpd_165_user.rb
Platform: win
Disclosure date: 1998-03-19
Authors: Fairuzan Roslan <riaf[at]mysec.org>
References: CVE-1999-0256, OSVDB-875, BID-10078

Description:
This module exploits a buffer overflow found in the USER command
          of War-FTPD 1.65.
Metasploit Module: Seagull FTP v3.3 Build 409 Stack Buffer Overflow
Type: exploit
Path: modules/exploits/windows/ftp/seagull_list_reply.rb
Platform: win
Disclosure date: 2010-10-12
References: CVE-2010-20007, OSVDB-94556, URL-http://www.corelan.be:8800/index.php/2010/10/12/death-of-an-ftp-client/

Description:
This module exploits a buffer overflow in the Seagull FTP client that gets
          triggered when the ftp client processes a response to a LIST command. If the
          response contains an overly long file/folder name, a buffer overflow occurs,
          overwriting a structured exception handler.
Metasploit Module: Oracle 9i XDB FTP UNLOCK Overflow (win32)
Type: exploit
Path: modules/exploits/windows/ftp/oracle9i_xdb_ftp_unlock.rb
Disclosure date: 2003-08-18
References: CVE-2003-0727, OSVDB-2449, BID-8375, URL-http://www.blackhat.com/presentations/bh-usa-03/bh-us-03-litchfield-paper.pdf

Description:
By passing an overly long token to the UNLOCK command, a
          stack based buffer overflow occurs. David Litchfield, has
          illustrated multiple vulnerabilities in the Oracle 9i XML
          Database (XDB), during a seminar on "Variations in exploit
          methods between Linux and Windows" presented at the Blackhat
          conference. Oracle9i includes a number of default accounts,
          including dbsnmp:dbsmp, scott:tiger, system:manager, and
          sys:change_on_install.

Check method (fingerprinting):
connect
    disconnect
    if (banner =~ /9\.2\.0\.1\.0/)
      return Exploit::CheckCode::Appears('FTP banner indicates Oracle 9i version 9.2.0.1.0')
    end

    return Exploit::CheckCode::Safe('FTP banner does not match Oracle 9i XDB')
  end
Metasploit Module: FTPShell 5.1 Stack Buffer Overflow
Type: exploit
Path: modules/exploits/windows/ftp/ftpshell51_pwd_reply.rb
Platform: win
Disclosure date: 2010-10-12
References: CVE-2017-6465, OSVDB-68639, URL-http://www.corelan.be:8800/index.php/2010/10/12/death-of-an-ftp-client/

Description:
This module exploits a stack buffer overflow in FTPShell 5.1. The overflow gets
          triggered when the ftp client tries to process an overly long response to a PWD
          command. This will overwrite the saved EIP and structured exception handler.
Metasploit Module: freeFTPd PASS Command Buffer Overflow
Type: exploit
Path: modules/exploits/windows/ftp/freeftpd_pass.rb
Platform: win
Disclosure date: 2013-08-20
References: CVE-2013-10042, OSVDB-96517, EDB-27747, BID-61905

Description:
freeFTPd 1.0.10 and below contains an overflow condition that is triggered as
          user-supplied input is not properly validated when handling a specially crafted
          PASS command. This may allow a remote attacker to cause a buffer overflow,
          resulting in a denial of service or allow the execution of arbitrary code.

          freeFTPd must have an account set to authorization anonymous user account.

Check method (fingerprinting):
connect
    disconnect

    # All versions including and above version 1.0 report "220 Hello, I'm freeFTPd 1.0"
    # when banner grabbing.
    if banner =~ /freeFTPd 1\.0/
      return Exploit::CheckCode::Appears('FTP banner indicates freeFTPd 1.0')
    else
      return Exploit::CheckCode::Safe('FTP banner does not match freeFTPd 1.0')

    end
  end
Metasploit Module: Cesar FTP 0.99g MKD Command Buffer Overflow
Type: exploit
Path: modules/exploits/windows/ftp/cesarftp_mkd.rb
Platform: win
Disclosure date: 2006-06-12
Authors: MC
References: CVE-2006-2961, OSVDB-26364, BID-18586, URL-http://web.archive.org/web/[PII_REDACTED]5555/http://secunia.com:80/advisories/20574/

Description:
This module exploits a stack buffer overflow in the MKD verb in CesarFTP 0.99g.

          You must have valid credentials to trigger this vulnerability. Also, you
          only get one chance, so choose your target carefully.

Check method (fingerprinting):
connect
    disconnect

    if (banner =~ /CesarFTP 0\.99g/)
      return Exploit::CheckCode::Appears('FTP banner indicates CesarFTP 0.99g')
    end

    return Exploit::CheckCode::Safe('FTP banner does not match CesarFTP 0.99g')
  end
Metasploit Module: Serv-U FTPD MDTM Overflow
Type: exploit
Path: modules/exploits/windows/ftp/servu_mdtm.rb
Platform: win
Disclosure date: 2004-02-26
References: CVE-2004-0330, OSVDB-4073, URL-http://archives.neohapsis.com/archives/bugtraq/2004-02/0654.html, BID-9751

Description:
This is an exploit for the Serv-U\'s MDTM command timezone
          overflow. It has been heavily tested against versions
          4.0.0.4/4.1.0.0/4.1.0.3/5.0.0.0 with success against
          nt4/2k/xp/2k3. I have also had success against version 3,
          but only tested 1 version/os. The bug is in all versions
          prior to 5.0.0.4, but this exploit will not work against
          versions not listed above. You only get one shot, but it
          should be OS/SP independent.

          This exploit is a single hit, the service dies after the
          shellcode finishes execution.

Check method (fingerprinting):
connect
    disconnect

    case banner
    when /Serv-U FTP Server v4\.1/
      vprint_status('Found version 4.1.0.3, exploitable')
      return Exploit::CheckCode::Appears('FTP banner indicates Serv-U FTP Server v4.1')

    when /Serv-U FTP Server v5\.0/
      vprint_status('Found version 5! 5.0.0.0 may be exploitable, but not 5.0.0.4')
      return Exploit::CheckCode::Detected('FTP banner indicates Serv-U FTP Server v5.0')

    when /Serv-U FTP Server v4\.0/
      vprint_status('Found version 4.0.0.4 or 4.1.0.0, additional check.')
      send_user(datastore['USER'])
      send_pass(datastore['PASS'])
      if (double_ff?)
        vprint_status('Found version 4.0.0.4, exploitable')
        return Exploit::CheckCode::Appears('FTP banner indicates Serv-U FTP Server v4.0.0.4')
      else
        vprint_status('Found version 4.1.0.0, exploitable')
        return Exploit::CheckCode::Appears('FTP banner indicates Serv-U FTP Server v4.1.0.0')
      end

    when /Serv-U FTP Server/
      vprint_status('Found an unknown version, try it!')
      return Exploit::CheckCode::Detected('FTP banner indicates Serv-U FTP Server of unknown version')

    else
      vprint_status('We could not recognize the server banner')
      return Exploit::CheckCode::Safe('FTP banner does not match Serv-U FTP Server')
    end

    return Exploit::CheckCode::Safe('FTP banner does not match Serv-U FTP Server')
  end
Metasploit Module: EasyFTP Server CWD Command Stack Buffer Overflow
Type: exploit
Path: modules/exploits/windows/ftp/easyftp_cwd_fixret.rb
Platform: win
Disclosure date: 2010-02-16
References: CVE-2010-20121, OSVDB-62134, BID-38262, URL-http://paulmakowski.wordpress.com/2010/02/28/increasing-payload-size-w-return-address-overwrite/, URL-http://paulmakowski.wordpress.com/2010/04/19/metasploit-plugin-for-easyftp-server-exploit, URL-https://seclists.org/bugtraq/2010/Feb/202

Description:
This module exploits a stack-based buffer overflow in EasyFTP Server 1.7.0.11
          and earlier. EasyFTP fails to check input size when parsing 'CWD' commands, which
          leads to a stack based buffer overflow.  EasyFTP allows anonymous access by
          default; valid credentials are typically unnecessary to exploit this vulnerability.

          After version 1.7.0.12, this package was renamed "UplusFtp".

          This exploit utilizes a small piece of code that I\'ve referred to as 'fixRet'.
          This code allows us to inject of payload of ~500 bytes into a 264 byte buffer by
          'fixing' the return address post-exploitation.  See references for more information.

Check method (fingerprinting):
connect
    disconnect

    if (banner =~ /BigFoolCat/) # EasyFTP Server has undergone several name changes
      return Exploit::CheckCode::Detected('FTP banner indicates BigFoolCat EasyFTP Server')
    end

    return Exploit::CheckCode::Safe('FTP banner does not match BigFoolCat EasyFTP Server')
  end
Metasploit Module: MS03-051 Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow
Type: exploit
Path: modules/exploits/windows/isapi/ms03_051_fp30reg_chunked.rb
Platform: win
Disclosure date: 2003-11-11
References: CVE-2003-0822, OSVDB-2952, BID-9007, MSB-MS03-051

Description:
This is an exploit for the chunked encoding buffer overflow
          described in MS03-051 and originally reported by Brett
          Moore. This particular modules works against versions of
          Windows 2000 between SP0 and SP3. Service Pack 4 fixes the
          issue.

Check method (fingerprinting):
print_status("Requesting the vulnerable ISAPI path...")
    r = send_request_raw({
      'uri' => normalize_uri(datastore['URL'])
    }, -1)

    if (r and r.code == 501)
      return Exploit::CheckCode::Detected('FrontPage fp30reg.dll ISAPI extension detected')
    end

    return Exploit::CheckCode::Safe('FrontPage fp30reg.dll ISAPI extension not detected')
  end
Metasploit Module: Microsoft IIS ISAPI w3who.dll Query String Overflow
Type: exploit
Path: modules/exploits/windows/isapi/w3who_query.rb
Platform: win
Disclosure date: 2004-12-06
References: CVE-2004-1134, OSVDB-12258, URL-http://www.exaprobe.com/labs/advisories/esa-2004-1206.html, BID-11820

Description:
This module exploits a stack buffer overflow in the w3who.dll ISAPI
          application. This vulnerability was discovered Nicolas
          Gregoire and this code has been successfully tested against
          Windows 2000 and Windows XP (SP2). When exploiting Windows
          XP, the payload must call RevertToSelf before it will be
          able to spawn a command shell.

Check method (fingerprinting):
if auto_target
      return Exploit::CheckCode::Appears('Vulnerable w3who.dll ISAPI extension detected')
    end

    Exploit::CheckCode::Safe('w3who.dll ISAPI extension not detected')
  end
Metasploit Module: MS00-094 Microsoft IIS Phone Book Service Overflow
Type: exploit
Path: modules/exploits/windows/isapi/ms00_094_pbserver.rb
Platform: win
Disclosure date: 2000-12-04
References: CVE-2000-1089, OSVDB-463, BID-2048, MSB-MS00-094

Description:
This is an exploit for the Phone Book Service /pbserver/pbserver.dll
          described in MS00-094. By sending an overly long URL argument
          for phone book updates, it is possible to overwrite the stack. This
          module has only been tested against Windows 2000 SP1.

Check method (fingerprinting):
print_status("Requesting the vulnerable ISAPI path...")
    res = send_request_raw({
      'uri' => normalize_uri(datastore['URL'])
    }, 5)

    if (res and res.code == 400)
      return Exploit::CheckCode::Detected('Phone Book Server ISAPI extension detected')
    end

    return Exploit::CheckCode::Safe('Phone Book Server ISAPI extension not detected')
  end
Metasploit Module: MS03-022 Microsoft IIS ISAPI nsiislog.dll ISAPI POST Overflow
Type: exploit
Path: modules/exploits/windows/isapi/ms03_022_nsiislog_post.rb
Platform: win
Disclosure date: 2003-06-25
References: CVE-2003-0349, OSVDB-4535, BID-8035, MSB-MS03-022, URL-http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0120.html

Description:
This exploits a buffer overflow found in the nsiislog.dll
          ISAPI filter that comes with Windows Media Server. This
          module will also work against the 'patched' MS03-019
          version. This vulnerability was addressed by MS03-022.

Check method (fingerprinting):
res = send_request_raw({
      'uri' => normalize_uri(datastore['URL'])
    }, -1)

    if (res and res.body =~ /NetShow ISAPI/)
      return Exploit::CheckCode::Detected('NetShow ISAPI extension detected')
    end

    return Exploit::CheckCode::Safe('NetShow ISAPI extension not detected')
  end
Metasploit Module: Microsoft IIS ISAPI RSA WebAgent Redirect Overflow
Type: exploit
Path: modules/exploits/windows/isapi/rsa_webagent_redirect.rb
Platform: win
Disclosure date: 2005-10-21
References: CVE-2005-4734, OSVDB-20151

Description:
This module exploits a stack buffer overflow in the SecurID Web
          Agent for IIS. This ISAPI filter runs in-process with
          inetinfo.exe, any attempt to exploit this flaw will result
          in the termination and potential restart of the IIS service.

Check method (fingerprinting):
r = send_request_raw({
      'uri' => normalize_uri(datastore['URL']),
      'query' => 'GetPic?image=msf'
    }, -1)

    if (r and r.body and r.body =~ /RSA Web Access Authentication/)
      return Exploit::CheckCode::Appears('RSA Web Access Authentication agent detected')
    end

    return Exploit::CheckCode::Safe('RSA Web Access Authentication agent not detected')
  end
Metasploit Module: Seattle Lab Mail 5.5 POP3 Buffer Overflow
Type: exploit
Path: modules/exploits/windows/pop3/seattlelab_pass.rb
Platform: win
Disclosure date: 2003-05-07
Authors: stinko
References: CVE-2003-0264, OSVDB-11975, BID-7519

Description:
There exists an unauthenticated buffer overflow vulnerability
          in the POP3 server of Seattle Lab Mail 5.5 when sending a password
          with excessive length.

          Successful exploitation should not crash either the
          service or the server; however, after initial use the
          port cannot be reused for successive exploitation until
          the service has been restarted. Consider using a command
          execution payload following the bind shell to restart
          the service if you need to reuse the same port.

          The overflow appears to occur in the debugging/error reporting
          section of the slmail.exe executable, and there are multiple
          offsets that will lead to successful exploitation. This exploit
          uses 2606, the offset that creates the smallest overall payload.
          The other offset is 4654.

          The return address is overwritten with a "jmp esp" call from the
          application library SLMFC.DLL found in %SYSTEM%\system32\. This
          return address works against all version of Windows and service packs.

          The last modification date on the library is dated 06/02/99. Assuming
          that the code where the overflow occurs has not changed in some time,
          prior version of SLMail may also be vulnerable with this exploit. The
          author has not been able to acquire older versions of SLMail for
          testing purposes. Please let us know if you were able to get this
          exploit working against other SLMail versions.
Metasploit Module: Sysax 5.53 SSH Username Buffer Overflow
Type: exploit
Path: modules/exploits/windows/ssh/sysax_ssh_username.rb
Platform: win
Disclosure date: 2012-02-27
References: CVE-2012-10060, OSVDB-79689, URL-http://www.pwnag3.com/2012/02/sysax-multi-server-ssh-username-exploit.html, EDB-18535

Description:
This module exploits a vulnerability found in Sysax's SSH service.  By
          supplying a long username, the SSH server will copy that data on the stack
          without proper bounds checking, therefore allowing remote code execution
          under the context of the user.  Please note that previous versions
          (before 5.53) are also affected by this bug.

Check method (fingerprinting):
begin
      connect
      banner = sock.get_once(-1, 5) || ''
      disconnect
      vprint_status("Banner: #{banner}")
      if banner.match?(/SSH-2\.0-SysaxSSH_1\.0/)
        return Exploit::CheckCode::Appears('Sysax SSH 1.0 detected')
      end
    rescue StandardError
      vprint_error('An error has occurred while trying to read a response from target')
      return Exploit::CheckCode::Unknown('Error reading response from target')
    end

    Exploit::CheckCode::Safe('Sysax SSH 1.0 not detected')
  end
Metasploit Module: FreeFTPd 1.0.10 Key Exchange Algorithm String Buffer Overflow
Type: exploit
Path: modules/exploits/windows/ssh/freeftpd_key_exchange.rb
Platform: win
Disclosure date: 2006-05-12
Authors: riaf <riaf[at]mysec.org>
References: CVE-2006-2407, OSVDB-25569, BID-17958

Description:
This module exploits a simple stack buffer overflow in FreeFTPd 1.0.10
          This flaw is due to a buffer overflow error when handling a specially
          crafted key exchange algorithm string received from an SSH client.
          This module is based on MC's freesshd_key_exchange exploit.
Metasploit Module: PuTTY Buffer Overflow
Type: exploit
Path: modules/exploits/windows/ssh/putty_msg_debug.rb
Platform: win
Disclosure date: 2002-12-16
Authors: MC
References: CVE-2002-1359, OSVDB-8044, URL-http://www.rapid7.com/advisories/R7-0009.html, BID-6407

Description:
This module exploits a buffer overflow in the PuTTY SSH client that is
          triggered through a validation error in SSH.c. This vulnerability
          affects versions 0.53 and earlier.
Metasploit Module: SecureCRT SSH1 Buffer Overflow
Type: exploit
Path: modules/exploits/windows/ssh/securecrt_ssh1.rb
Platform: win
Disclosure date: 2002-07-23
Authors: MC
References: CVE-2002-1059, OSVDB-4991, BID-5287

Description:
This module exploits a buffer overflow in SecureCRT <= 4.0
          Beta 2. By sending a vulnerable client an overly long
          SSH1 protocol identifier string, it is possible to execute
          arbitrary code.

          This module has only been tested on SecureCRT 3.4.4.
Metasploit Module: Freesshd Authentication Bypass
Type: exploit
Path: modules/exploits/windows/ssh/freesshd_authbypass.rb
Platform: win
Disclosure date: 2010-08-11
References: CVE-2012-6066, OSVDB-88006, BID-56785, URL-http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0012.html, URL-https://seclists.org/fulldisclosure/2010/Aug/132

Description:
This module exploits a vulnerability found in FreeSSHd <= 1.2.6 to bypass
          authentication. You just need the username (which defaults to root). The exploit
          has been tested with both password and public key authentication.

Check method (fingerprinting):
connect
    banner = sock.recv(30)
    disconnect
    if banner.match?(/SSH\-2\.0\-WeOnlyDo/)
      version = banner.split(" ")[1]
      return Exploit::CheckCode::Vulnerable("Vulnerable freeSSHd version #{version} detected") if version.match?(/(2\.1\.3|2\.0\.6)/)

      return Exploit::CheckCode::Detected("freeSSHd detected but version #{version} may not be vulnerable")
    end
    Exploit::CheckCode::Safe('freeSSHd not detected')
  end
Metasploit Module: FreeSSHd 1.0.9 Key Exchange Algorithm String Buffer Overflow
Type: exploit
Path: modules/exploits/windows/ssh/freesshd_key_exchange.rb
Platform: win
Disclosure date: 2006-05-12
Authors: MC
References: CVE-2006-2407, OSVDB-25463, BID-17958

Description:
This module exploits a simple stack buffer overflow in FreeSSHd 1.0.9.
          This flaw is due to a buffer overflow error when handling a specially
          crafted key exchange algorithm string received from an SSH client.
Metasploit Module: MS05-030 Microsoft Outlook Express NNTP Response Parsing Buffer Overflow
Type: exploit
Path: modules/exploits/windows/nntp/ms05_030_nntp.rb
Platform: win
Disclosure date: 2005-06-14
Authors: MC
References: CVE-2005-1213, OSVDB-17306, BID-13951, MSB-MS05-030

Description:
This module exploits a stack buffer overflow in the news reader of Microsoft
          Outlook Express.
Metasploit Module: MOVEit SQL Injection vulnerability
Type: exploit
Path: modules/exploits/windows/http/moveit_cve_2023_34362.rb
Platform: win
Disclosure date: 2023-05-31
References: CVE-2023-34362, URL-https://github.com/sfewer-r7/CVE-2023-34362, URL-https://attackerkb.com/topics/mXmV0YpC3W/cve-2023-34362/rapid7-analysis, URL-https://www.wiz.io/blog/cve-2023-34362

Description:
This module exploits an SQL injection vulnerability in the MOVEit Transfer web application
          that allows an unauthenticated attacker to gain access to MOVEit Transfer's database.
          Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an
          attacker can leverage an information leak be able to upload a .NET deserialization payload.

Check method (fingerprinting):
res = send_request_cgi({
      'method' => 'GET',
      'uri' => normalize_uri('moveitisapi/moveitisapi.dll?action=capa'),
      'connection' => 'close',
      'accept' => '*/*'
    })
    version = nil
    if res && res.code == 200 && res.headers.key?('X-MOVEitISAPI-Version')
      version = Rex::Version.new(res.headers['X-MOVEitISAPI-Version'])
      # 2020.1.x AKA 12.1.x
      return Exploit::CheckCode::Appears("MOVEit Transfer version #{version} is vulnerable") if version >= Rex::Version.new('12.1.0') && version < Rex::Version.new('12.1.10')
      # 2021.0.x AKA 13.0.x
      return Exploit::CheckCode::Appears("MOVEit Transfer version #{version} is vulnerable") if version >= Rex::Version.new('13.0.0') && version < Rex::Version.new('13.0.8')
      # 2021.1.x AKA 13.1.x
      return Exploit::CheckCode::Appears("MOVEit Transfer version #{version} is vulnerable") if version >= Rex::Version.new('13.1.0') && version < Rex::Version.new('13.1.6')
      # 2022.0.x AKA 14.0.x
      return Exploit::CheckCode::Appears("MOVEit Transfer version #{version} is vulnerable") if version >= Rex::Version.new('14.0.0') && version < Rex::Version.new('14.0.6')
      # 2022.1.x AKA 14.1.x
      return Exploit::CheckCode::Appears("MOVEit Transfer version #{version} is vulnerable") if version >= Rex::Version.new('14.1.0') && version < Rex::Version.new('14.1.7')
      # 2023.0.x AKA 15.0.x
      return Exploit::CheckCode::Appears("MOVEit Transfer version #{version} is vulnerable") if version >= Rex::
Metasploit Module: NetMotion Mobility Server MvcUtil Java Deserialization
Type: exploit
Path: modules/exploits/windows/http/netmotion_mobility_mvcutil_deserialization.rb
Platform: win
Disclosure date: 2021-02-08
References: CVE-2021-26914, URL-https://ssd-disclosure.com/ssd-advisory-netmotion-mobility-server-multiple-deserialization-of-untrusted-data-lead-to-rce/, URL-https://www.netmotionsoftware.com/security-advisories/security-vulnerability-in-mobility-web-server-november-19-2020, URL-https://srcincite.io/advisories/src-2021-0007/
Targets: Windows Command, Windows Dropper, PowerShell Stager

Description:
This module exploits an unauthenticated Java deserialization in the
          NetMotion Mobility server's MvcUtil.valueStringToObject() method, as
          invoked through the /mobility/Menu/isLoggedOn endpoint, to execute
          code as the SYSTEM account.

          Mobility server versions 11.x before 11.73 and 12.x before 12.02 are
          vulnerable. Tested against 12.01.09045 on Windows Server 2016.

Check method (fingerprinting):
res = send_request_cgi(
      'method' => 'GET',
      'uri' => normalize_uri(target_uri.path)
    )

    unless (version = parse_version(res))
      return CheckCode::Unknown('Failed to parse version from response.')
    end

    unless vuln_version?(version)
      return CheckCode::Safe("NetMotion Mobility #{version} is patched.")
    end

    CheckCode::Appears("NetMotion Mobility #{version} is unpatched.")
  end
Metasploit Module: HP SiteScope DNS Tool Command Injection
Type: exploit
Path: modules/exploits/windows/http/hp_sitescope_dns_tool.rb
Platform: win
Disclosure date: 2015-10-09
References: URL-https://www.rapid7.com/blog/post/2015/10/09/r7-2015-17-hp-sitescope-dns-tool-command-injection, URL-http://www8.hp.com/us/en/software-solutions/sitescope-application-monitoring/index.html
Targets: HP SiteScope 11.30 / Microsoft Windows 7 and higher, HP SiteScope 11.30 / CMD

Description:
This module exploits a command injection vulnerability
          discovered in HP SiteScope 11.30 and earlier versions (tested in 11.26
          and 11.30). The vulnerability exists in the DNS Tool allowing an
          attacker to execute arbitrary commands in the context of the service. By
          default, HP SiteScope installs and runs as SYSTEM in Windows and does
          not require authentication. This vulnerability only exists on the
          Windows version. The Linux version is unaffected.