Exploitation Summary
EIP tracks 2 public exploits for CVE-1999-0235.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in NCSA HTTPd 1.3 by overflowing the username field with a crafted GET request containing NOP sleds and shellcode. The exploit calculates the return address using an offset from the stack pointer and executes arbitrary code (a shell) with the privileges of the webserver process.
Description
Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
Exploits (2)
This exploit targets a buffer overflow vulnerability in NCSA HTTPd 1.3 by overflowing the username field with a crafted GET request containing NOP sleds and shellcode. The exploit calculates the return address using an offset from the stack pointer and executes arbitrary code (a shell) with the privileges of the webserver process.
This exploit targets a buffer overflow vulnerability in NCSA HTTPd 1.3 by sending a crafted GET request with an overly long username field containing shellcode. The shellcode spawns a reverse shell, allowing remote code execution with the privileges of the web server process.