Exploitation Summary
EIP tracks 4 public exploits for CVE-2001-0414.
PoCs published by Metasploit, patrick, babcia padlina ltd, including Metasploit module exploits/multi/ntp/ntp_overflow.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack-based buffer overflow in NTP daemon (ntpd/xntpd) via a malformed 'readvar' request. It uses the Egghunter technique to locate and execute the payload due to stack corruption.
Description
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.
Exploits (4)
This is a Metasploit module exploiting a stack-based buffer overflow in NTP daemon (ntpd/xntpd) via a malformed 'readvar' request. It uses the Egghunter technique to locate and execute the payload due to stack corruption.
This exploit targets a stack-based buffer overflow in NTP daemon (ntpd/xntpd) via a malformed 'readvar' request. It uses the Egghunter technique to locate and execute the payload due to stack corruption.
This exploit targets a buffer overflow vulnerability in NTPD (CVE-2001-0414) by sending a maliciously crafted UDP packet to execute arbitrary code. It includes platform-specific shellcode to spawn a shell via /tmp/sh and demonstrates remote root access on vulnerable systems.
This Metasploit module exploits a stack-based buffer overflow in NTP daemon (ntpd/xntpd) via a malformed 'readvar' request. It uses an egghunter technique to achieve remote code execution on vulnerable Linux systems.