CVE-2001-0341
Microsoft FrontPage Server Extensions - Remote Code Execution via Long Registration Request to fp30reg.dll
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-0341. PoCs published by NSFOCUS Security Team.
AI-analyzed exploit summary This exploit targets a buffer overflow in FrontPage Server Extensions via 'fp30reg.dll' using chunked encoding to execute arbitrary commands on IIS 5.0 (as IWAM_machinename) or IIS 4.0 (as SYSTEM). It leverages a crafted HTTP POST request with a malicious payload to achieve remote code execution.
Description
Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll.
Exploits (2)
This exploit targets a buffer overflow in FrontPage Server Extensions via 'fp30reg.dll' using chunked encoding to execute arbitrary commands on IIS 5.0 (as IWAM_machinename) or IIS 4.0 (as SYSTEM). It leverages a crafted HTTP POST request with a malicious payload to achieve remote code execution.
This exploit targets a buffer overflow vulnerability in the FrontPage Server Extensions (fp30reg.dll) to execute arbitrary commands on IIS 4.0 (SYSTEM) or IIS 5.0 (IWAM_machinename). The PoC includes shellcode and a crafted HTTP request to trigger the overflow.