Exploitation Summary
EIP tracks 2 public exploits for CVE-2002-1142.
PoCs published by Metasploit, including Metasploit module exploits/windows/iis/ms02_065_msadc.
AI-analyzed exploit summary This exploit targets a heap overflow vulnerability in Microsoft IIS MDAC msadcs.dll via an overly long 'Content-Type' string in the RDS DataStub. It achieves remote code execution by sending a maliciously crafted POST request to the /msadc/msadcs.dll endpoint.
Description
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
Exploits (2)
This exploit targets a heap overflow vulnerability in Microsoft IIS MDAC msadcs.dll via an overly long 'Content-Type' string in the RDS DataStub. It achieves remote code execution by sending a maliciously crafted POST request to the /msadc/msadcs.dll endpoint.
This Metasploit module exploits a heap overflow in Microsoft IIS MDAC msadcs.dll via an overly long 'Content-Type' string in the RDS DataStub, allowing arbitrary code execution. It targets multiple Windows 2000 configurations and uses a reverse TCP shell payload.