CVE-2001-0815
ActivePerl < 5.6.1.629 - Remote Code Execution via Long Filename HTTP Request
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2001-0815. PoCs published by Indigo, Sapient2003.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in ActivePerl's perlIIS.dll (CVE-2001-0815) by sending a crafted HTTP request with an overly long URL to trigger remote code execution. The shellcode connects back to an attacker-controlled host and port.
Description
Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension.
Exploits (3)
This exploit targets a buffer overflow vulnerability in ActivePerl's perlIIS.dll (CVE-2001-0815) by sending a crafted HTTP request with an overly long URL to trigger remote code execution. The shellcode connects back to an attacker-controlled host and port.
This exploit targets a buffer overflow in ActivePerl's perlIIS.dll via an unbounded string copy operation in URL handling. It sends a crafted HTTP GET request with a long string of 'A' characters to trigger the overflow.
This exploit targets a buffer overflow vulnerability in ActivePerl's perlIIS.dll (CVE-2001-0815) by sending a crafted HTTP request with an overly long URL to trigger arbitrary code execution. The shellcode establishes a reverse shell connection to an attacker-controlled host and port.