CVE-2001-1067
AOLserver 3.0 - Buffer Overflow via HTTP Authorization Header
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-1067. PoCs published by qitest1, Nate Haggard.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in AOLServer's ParseAuth() function by sending a maliciously crafted HTTP request with an oversized password field. It attempts to execute arbitrary shellcode (a bindshell on port 30464) by overwriting the stack frame pointer and return address.
Description
Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header.
Exploits (2)
This exploit targets a buffer overflow vulnerability in AOLServer's ParseAuth() function by sending a maliciously crafted HTTP request with an oversized password field. It attempts to execute arbitrary shellcode (a bindshell on port 30464) by overwriting the stack frame pointer and return address.
This exploit targets a buffer overflow vulnerability in AOLServer 3.0 by sending a maliciously crafted HTTP request with an oversized Authorization header. The PoC demonstrates a denial-of-service (DoS) condition by crashing the server, though it could potentially be adapted for remote code execution (RCE).