CVE-2001-0168

This exploit targets a buffer overflow in WinVNC Web Server <= v3.3.3r7 via an overly long GET request. It leverages stack-based overflow to execute arbitrary code, with specific return addresses for different Windows versions.

This Metasploit module exploits a buffer overflow in AT&T WinVNC's web server (v3.3.3r7 or earlier) via an overly long GET request when debugging mode with logging is enabled. It achieves remote code execution by overwriting the stack with a crafted payload and return address.