CVE-2002-0098

boozt_standard 0.9.8 - Local Buffer Overflow via Long Banner Name Field

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-0098. PoCs published by Rafael San Miguel Carrasco.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Boozt! Standard 0.9.8 CGI by sending a maliciously crafted HTTP POST request with an overly long 'name' parameter, leading to arbitrary code execution via shellcode.

Description

Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Rafael San Miguel Carrasco · cremotelinux

https://www.exploit-db.com/exploits/21205

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in Boozt! Standard 0.9.8 CGI by sending a maliciously crafted HTTP POST request with an overly long 'name' parameter, leading to arbitrary code execution via shellcode.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Boozt! Standard 0.9.8

No auth needed

Prerequisites: Network access to the target CGI interface · Boozt! Standard 0.9.8 running on a Linux host

MITRE ATT&CK