Stack-based Buffer Overflow in CA Alert Notification Service (Alert.exe)

This repository contains a single Metasploit exploit module targeting a buffer overflow vulnerability (CVE-2007-4620) in Computer Associates Threat Manager for the Enterprise r8.1 and related products. The exploit abuses a vulnerable DCERPC service accessible over SMB named pipe (default: \\alert) using the UUID 3d742890-397c-11cf-9bf1-00805f88cb72. The attacker must have valid SMB credentials to the target system. The module allows the attacker to execute arbitrary code (Metasploit payloads) on the target, typically resulting in a shell or Meterpreter session. The exploit supports multiple Windows targets, including Windows 2000 SP4 and Windows 2003 SP0, and includes specific return addresses for each. The code is written in Ruby and follows standard Metasploit module structure, with all logic contained in a single file. No external endpoints or domains are hardcoded beyond the SMB pipe and DCERPC UUID.