20001211 [pkc] remote heap buffer overflow in oopsmailing list
http://archives.neohapsis.com/archives/bugtraq/2000-12/0127.html CVE-2001-0028
Oops Proxy Server 1.4.22 - Remote Buffer Overflow (1)
Record summary
CVE-2001-0028 has a selected CVSS score of 10.0; EIP currently links 2 catalogued exploits.
Description
Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " (quotation) characters.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBOops Proxy Server 1.4.22 - Remote Buffer Overflow (1)ExploitDB exploitby CyRaXNot analyzed1 file
ExploitDBOops Proxy Server 1.4.22 - Remote Buffer Overflow (2)ExploitDB exploitby dimanNot analyzed1 file
References
5FreeBSD-SA-00:79Vendor advisory
http://archives.neohapsis.com/archives/freebsd/2000-12/0418.html 2099vdb entry
http://www.securityfocus.com/bid/2099 oops-ftputils-bo(5725)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/5725 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2001-0028