CVE-2001-0144
OpenSSH - Remote Code Execution via CRC-32 Compensation Attack
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-0144. PoCs published by Teso, Michal Zalewski.
AI-analyzed exploit summary The provided entry is a placeholder link to a tarball (349.tgz) with no actual exploit code or details. It references milw0rm.com but lacks technical content.
Description
CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.
Exploits (2)
The provided entry is a placeholder link to a tarball (349.tgz) with no actual exploit code or details. It references milw0rm.com but lacks technical content.
This exploit targets an integer overflow vulnerability in SSH's CRC32 compensation attack detection code, allowing arbitrary memory writes and potential remote code execution. The provided patch includes shellcode for a TCP/36864 portshell, demonstrating the exploit's capability to execute arbitrary commands with root privileges.