CVE-2001-0820
GazTek ghttpd 1.4 - Remote Code Execution via Long Arguments
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-0820. PoCs published by flea.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in GazTek HTTP Daemon v1.4 by sending a maliciously crafted GET request with an excessive argument length. It includes shellcode for a bind shell on port 36864 and supports multiple architectures (RedHat 7.2/7.3, Slackware 8.1).
Description
Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log function in util.c, or (2) serveconnection in protocol.c.
Exploits (2)
This exploit targets a stack-based buffer overflow in GazTek HTTP Daemon v1.4 by sending a maliciously crafted GET request with an excessive argument length. It includes shellcode for a bind shell on port 36864 and supports multiple architectures (RedHat 7.2/7.3, Slackware 8.1).
This exploit targets a buffer overflow vulnerability in GazTek HTTP Daemon v1.4 (ghttpd) on Linux x86 systems. It crafts a malicious HTTP GET request with shellcode to achieve remote code execution, spawning a shell with the privileges of the webserver (typically 'nobody').