{"vulnerability": "cve-2017-13696", "sightings": [{"uuid": "56ea9589-7052-4e9b-af6f-09a8927082cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13696", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "20b58ec3-1e60-4e61-975d-d9749d9cd681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13696", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:53.000000Z"}, {"uuid": "4106a4ea-5e9b-4514-93bf-a015afd33d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13696", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/dup_scout_enterprise_login_bof.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "bf0d6006-fb1f-4e9c-abde-1312356c7d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13696", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/dupscts_bof.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "dd7e820d-6826-4d66-9c9c-e416b0f63023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13696", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/disk_pulse_enterprise_get.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "09ace21f-b39e-4a72-9d6e-bdb87d05bc0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13696", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/dup_scout_enterprise_login_bof.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"sickness\", \"Chris Higgins\", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in Dup Scout Enterprise\\n          versions <= 10.0.18. The buffer overflow exists via the web interface\\n          during login. This gives NT AUTHORITY\\\\SYSTEM access.\\n\\n          This module has been tested successfully on Dup Scout Enterprise\\n          versions:\\n\\n          9.9.14 on Windows 7 SP1 (x64);\\n          9.9.14 on Windows XP SP0 (x64);\\n          10.0.18 on Windows 7 SP1 (x64);\\n          10.0.18 on Windows XP SP0 (x86); and\\n          10.0.18 on Windows 10 (1909) (x64).\", \"disclosure_date\": \"2017-11-14\", \"fullname\": \"exploit/windows/http/dup_scout_enterprise_login_bof\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:32:22 +0000\", \"name\": \"Dup Scout Enterprise Login Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/exploits/windows/http/dup_scout_enterprise_login_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/http/dup_scout_enterprise_login_bof\", \"references\": [\"CVE-2017-13696\", \"CWE-121\", \"EDB-42557\", \"EDB-43145\", \"EDB-40832\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\", \"Dup Scout Enterprise 9.9.14 (x86)\", \"Dup Scout Enterprise 10.0.18 (x86)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:45.324814Z"}, {"uuid": "d0295bef-93c8-46f2-958f-a6f53c376c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13696", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/disk_pulse_enterprise_get.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Chance Johnson\", \"Nipun Jaswal & Anurag Srivastava\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an SEH buffer overflow in Disk Pulse Enterprise\\n          9.9.16. If a malicious user sends a crafted HTTP GET request\\n          it is possible to execute a payload that would run under the Windows\\n          NT AUTHORITY\\\\SYSTEM account.\", \"disclosure_date\": \"2017-08-25\", \"fullname\": \"exploit/windows/http/disk_pulse_enterprise_get\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"Disk Pulse Enterprise GET Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/disk_pulse_enterprise_get.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/disk_pulse_enterprise_get\", \"references\": [\"CVE-2017-13696\", \"EDB-42560\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Disk Pulse Enterprise 9.9.16\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:44.386522Z"}, {"uuid": "db9467b0-27ed-48a7-b291-2e6903c62154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13696", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/dupscts_bof.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"vportal\", \"Daniel Teixeira\", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a stack-based buffer overflow vulnerability\\n          in the web interface of Dup Scout Enterprise versions <= 10.0.18,\\n          caused by improper bounds checking of the request path in HTTP GET\\n          requests sent to the built-in web server which can be leveraged\\n          to execute arbitrary code in the context of NT AUTHORITY\\\\SYSTEM.\\n\\n          This module supports x86 versions of Dup Scout Enterprise and x86\\n          Windows operating systems only and has been tested successfully on\\n          Windows 7 SP1 (x86) and Windows XP SP0 (x86).\", \"disclosure_date\": \"2017-03-15\", \"fullname\": \"exploit/windows/http/dupscts_bof\", \"is_install_path\": true, \"mod_time\": \"2025-06-20 13:20:44 +0000\", \"name\": \"Dup Scout Enterprise GET Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/exploits/windows/http/dupscts_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/http/dupscts_bof\", \"references\": [\"CVE-2017-13696\", \"CWE-121\", \"EDB-42557\", \"EDB-49217\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\", \"Dup Scout Enterprise v8.3.16 (x86)\", \"Dup Scout Enterprise v8.4.16 (x86)\", \"Dup Scout Enterprise v9.0.28 (x86)\", \"Dup Scout Enterprise v9.1.14 (x86)\", \"Dup Scout Enterprise v9.5.14 (x86)\", \"Dup Scout Enterprise v9.9.14 (x86)\", \"Dup Scout Enterprise v10.0.18 (x86)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:45.407692Z"}]}