CVE-1999-0896
RealServer G2 - Remote Code Execution via Long Username and Password
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-1999-0896. PoCs published by dark spyrit.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in RealNetworks RealServer G2's web administration feature. It sends a maliciously crafted HTTP request with an overly long 'Authorization' header to overflow the buffer and execute arbitrary code.
Description
Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password.
Exploits (2)
This exploit targets a buffer overflow vulnerability in RealNetworks RealServer G2's web administration feature. It sends a maliciously crafted HTTP request with an overly long 'Authorization' header to overflow the buffer and execute arbitrary code.
This exploit targets a buffer overflow vulnerability in RealServer's web administration feature by sending a long authentication response. The shellcode is base64 encoded and designed to execute arbitrary code on the server.