20001212 Stack too ;) Re: [pkc] remote heap buffer overflow in oopsmailing list
http://archives.neohapsis.com/archives/bugtraq/2000-12/0158.html CVE-2001-0029
Oops! 1.4.6 - one russi4n proxy-server Heap Buffer Overflow
Record summary
CVE-2001-0029 has a selected CVSS score of 10.0; EIP currently links 1 catalogued exploit.
Description
Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBOops! 1.4.6 - one russi4n proxy-server Heap Buffer OverflowExploitDB exploitby dimanNot analyzed1 file
References
52099vdb entry
http://www.securityfocus.com/bid/2099 zipper.paco.net
http://zipper.paco.net/~igor/oops/ChangeLog oops-dns-bo(6122)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/6122 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2001-0029