CVE-2001-0028
oops_proxy_server 1.5.2 - Remote Code Execution via HTML Parser Quotation Character Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-0028. PoCs published by CyRaX, diman.
AI-analyzed exploit summary This exploit targets a heap-based buffer overflow in Oops Proxy Server v1.4.22 and prior. It leverages a crafted FTP response to overflow the heap, overwrite the __free_hook, and execute arbitrary shellcode, resulting in remote code execution.
Description
Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " (quotation) characters.
Exploits (2)
This exploit targets a heap-based buffer overflow in Oops Proxy Server v1.4.22 and prior. It leverages a crafted FTP response to overflow the heap, overwrite the __free_hook, and execute arbitrary shellcode, resulting in remote code execution.
This exploit targets a buffer overflow vulnerability in Oops proxy server 1.4.6, allowing remote code execution via crafted HTTP requests with excessive quotation marks or long hostnames. The shellcode performs a reverse shell connection and includes techniques to handle offset variations.