CVE-2001-0241
Windows 2000 - Buffer Overflow in Internet Printing ISAPI Extension
Title source: llmExploitation Summary
EIP tracks 8 public exploits for CVE-2001-0241.
PoCs published by Metasploit, styx, dark spyrit, including Metasploit module exploits/windows/iis/ms01_023_printer.
AI-analyzed exploit summary This exploit targets a buffer overflow in the Internet Printing Protocol ISAPI module in Microsoft IIS 5.0 on Windows 2000 SP0-SP1. It leverages a malformed Host header to execute arbitrary code via a crafted HTTP request.
Description
Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.
Exploits (8)
This exploit targets a buffer overflow in the Internet Printing Protocol ISAPI module in Microsoft IIS 5.0 on Windows 2000 SP0-SP1. It leverages a malformed Host header to execute arbitrary code via a crafted HTTP request.
This code is a scanner for CVE-2001-0241, which exploits a buffer overflow in the Windows 2000 Internet Printing ISAPI extension (msw3prt.dll). It sends a crafted HTTP request with an oversized 'Host:' field to check for vulnerability.
This exploit targets a buffer overflow vulnerability in IIS 5 via a malformed .printer request. It overwrites an exception frame to control EIP and execute shellcode, which spawns a reverse shell to the attacker's specified host and port.
This exploit targets a buffer overflow in the .printer ISAPI filter of unpatched Windows 2000 systems. It uses a crafted Host header to trigger the overflow and execute shellcode, creating a file on the target's C: drive as proof of exploitation.
The exploit describes a buffer overflow vulnerability in Windows 2000's Internet printing ISAPI extension (msw3prt.dll). A maliciously crafted HTTP .printer request with an oversized 'Host:' field (~420 bytes) can trigger arbitrary code execution. The server may restart automatically, obscuring the attack.
This exploit targets a buffer overflow vulnerability in the Windows 2000 Internet Printing ISAPI extension (msw3prt.dll) via a maliciously crafted HTTP .printer request with an oversized 'Host:' field (~420 bytes). It includes shellcode for arbitrary code execution, leveraging a reverse shell payload.
This exploit targets a buffer overflow vulnerability in the Windows 2000 Internet Printing ISAPI extension (msw3prt.dll) via a maliciously crafted HTTP request with an oversized 'Host:' field. It sends a long string of 'A's to trigger the overflow, potentially allowing arbitrary code execution.
This Metasploit module exploits a buffer overflow in the Internet Printing Protocol ISAPI module in IIS 5.0 on Windows 2000 SP0-SP1. It leverages a malformed Host header to trigger a stack-based overflow, leading to remote code execution.