Exploitation Summary
EIP tracks 4 public exploits for CVE-2001-0010. PoCs published by Multiple, LSD-PLaNET, Gneisenau.
AI-analyzed exploit summary This exploit targets a vulnerability in BIND 8.2.x (CVE-2001-0010) by leveraging an information leak and TSIG bug to execute arbitrary shellcode. The shellcode creates a bind shell on port 36864, providing remote command execution.
Description
Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.
Exploits (4)
This exploit targets a vulnerability in BIND 8.2.x (CVE-2001-0010) by leveraging an information leak and TSIG bug to execute arbitrary shellcode. The shellcode creates a bind shell on port 36864, providing remote command execution.
This exploit targets a vulnerability in BIND 8.2.x on Solaris 2.7 x86. It uses the 'infoleek' bug to leak stack information and then constructs a malicious DNS packet to execute arbitrary shellcode, spawning a shell on a pre-established TCP connection.
This exploit targets a vulnerability in BIND 8.2.x (CVE-2001-0010) by leveraging an information leak via UDP to obtain stack pointer values, then crafting a malicious DNS TSIG packet to execute shellcode. The shellcode duplicates a socket descriptor and spawns a shell, bypassing firewall restrictions by reusing the established TCP connection on port 53.
This exploit targets a buffer overflow vulnerability in BIND DNS server (CVE-2001-0010) by crafting a malicious DNS query with embedded shellcode. It leverages a stack-based overflow in the TSIG handling code to execute arbitrary commands, specifically spawning a reverse shell.