Rosiello Security Sphiro HTTPd 0.1B – Remote Heap Buffer Overflow

漏洞ID	1054466	漏洞类型
发布时间	2004-04-30	更新时间	2004-04-30
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Multiple	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/24070

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/10249/info

It has been reported that Sphiro HTTPD is prone to a remote heap based buffer overflow vulnerability. This issue is due to a failure of the application to properly verify buffer boundaries before storing input in fixed buffers.

Immediate consequences of this attack may cause the affected daemon to crash, denying service to legitimate users. Furthermore, due to the nature this issue, arbitrary code execution may be possible. This would occur in the context running daemon process.

perl -e 'print "GET HTTP/1.1" . "A"x1000 . "nn"' |nc www.example.com 80

相关推荐: Windows NT的Trend Micro InterScan VirusWall更改配置漏洞

Windows NT的Trend Micro InterScan VirusWall更改配置漏洞漏洞ID 1106352 漏洞类型未知发布时间 2001-05-24 更新时间 2001-10-18 CVE编号 CVE-2001-0791 CNNVD-ID…