Exploitation Summary
EIP tracks 2 public exploits for CVE-2000-0626. PoCs published by wildcoyote, Prizm.
AI-analyzed exploit summary This exploit sends an abnormally long GET request (> 8000 bytes) to Alibaba Web Server 2.0, causing a denial of service by crashing the service. The PoC allocates a buffer, fills it with 'A' characters, and sends it to the target server.
Description
Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request.
Exploits (2)
This exploit sends an abnormally long GET request (> 8000 bytes) to Alibaba Web Server 2.0, causing a denial of service by crashing the service. The PoC allocates a buffer, fills it with 'A' characters, and sends it to the target server.
The exploit demonstrates command injection in Alibaba Web Server by appending piped commands to CGI script URLs. This allows arbitrary command execution with the privileges of the web server process.