{"uuid": "2f123ffd-6345-41cd-b3c2-c74992df307e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-5124", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/bcaaa_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Paul Harrington\", \"Travis Warren\", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in process bcaaa-130.exe (port 16102),\\n          which comes as part of the Blue Coat Authentication proxy.  Please note that by default,\\n          this exploit will attempt up to three times in order to successfully gain remote code\\n          execution (in some cases, it takes as many as five times).  This can cause your activity\\n          to look even more suspicious.  To modify the number of exploit attempts, set the\\n          ATTEMPTS option.\", \"disclosure_date\": \"2011-04-04\", \"fullname\": \"exploit/windows/misc/bcaaa_bof\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Blue Coat Authentication and Authorization Agent (BCAAA) 5 Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/misc/bcaaa_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/misc/bcaaa_bof\", \"references\": [\"CVE-2011-5124\", \"OSVDB-72095\", \"URL-https://kb.bluecoat.com/index?page=content&id=SA55\", \"URL-https://seclists.org/bugtraq/2011/Jul/44\"], \"rport\": 16102, \"session_types\": false, \"targets\": [\"BCAAA Version 5.4.6.1.54128\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:15.314528Z"}