CVE-2000-0973
curl < 6.0-1.1 and curl-ssl < 6.0-1.2 - Buffer Overflow via Long Error Message
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2000-0973. PoCs published by zillion.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in cURL versions 6.1 to 7.4, where a malicious FTP server response can overwrite the return address on the stack, leading to arbitrary code execution. The shellcode writes a message to a file as a proof of concept.
Description
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated.
Exploits (2)
This exploit targets a buffer overflow vulnerability in cURL versions 6.1 to 7.4, where a malicious FTP server response can overwrite the return address on the stack, leading to arbitrary code execution. The shellcode writes a message to a file as a proof of concept.
This exploit targets a buffer overflow vulnerability in cURL versions included with Debian GNU/Linux 2.2 and FreeBSD prior to 4.2. It crafts a malicious FTP server response to overwrite the return address on the stack, leading to arbitrary code execution on the client host.