CVE-1999-0235

This exploit targets a buffer overflow vulnerability in NCSA HTTPd 1.3 by overflowing the username field with a crafted GET request containing NOP sleds and shellcode. The exploit calculates the return address using an offset from the stack pointer and executes arbitrary code (a shell) with the privileges of the webserver process.

This exploit targets a buffer overflow vulnerability in NCSA HTTPd 1.3 by sending a crafted GET request with an overly long username field containing shellcode. The shellcode spawns a reverse shell, allowing remote code execution with the privileges of the web server process.