CVE-2001-0876
Windows 98, 98SE, ME, and XP - Remote Code Execution via UPnP NOTIFY Location URL
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-0876. PoCs published by JOCANOR, Gabriel Maggiotti.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the UPnP service on Windows XP (CVE-2001-0876) by sending a crafted NOTIFY directive to overwrite memory and execute a bind shell on port 1981. The exploit uses a combination of NOP sleds, a jump code, and shellcode to achieve remote code execution.
Description
Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.
Exploits (2)
This exploit targets a buffer overflow vulnerability in the UPnP service on Windows XP (CVE-2001-0876) by sending a crafted NOTIFY directive to overwrite memory and execute a bind shell on port 1981. The exploit uses a combination of NOP sleds, a jump code, and shellcode to achieve remote code execution.
This exploit targets a buffer overflow vulnerability in the Universal Plug and Play (UPnP) service on Windows ME and XP. It can cause a denial-of-service (DoS) or execute arbitrary code by sending a maliciously crafted NOTIFY directive with excessive length in the IP address, port, and filename components.