rapid7/metasploit-framework — pull request #417 by wchen-r7 (2012-05-25 08:10:46+00:00)
Title: Add OSVDB-79007 - RabidHamster R4 Log Entry BoF

This module exploits a vulnerability found in RabidHamster R4's web server. By supplying a malformed HTTP request, it is possible to trigger a stack-based buffer overflow when generating a log, which may result in arbitrary code execution under the context of the user.

Note: Despite the fact ddraw.dll comes from Windows\System32\, the version still remains the same under these test environments:
* Win XP SP3 unpatched
* Win XP SP3 fully patched
* Win XP SP3 fully patched + Office 2007 installed