CVE-2002-1489
PlanetDNS PlanetWeb < 1.14 - Remote Code Execution via Long URL or Method Name
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-1489. PoCs published by UkR-XblP.
AI-analyzed exploit summary This Perl script exploits a buffer overflow vulnerability in PlanetWeb web server by sending a maliciously crafted GET request with a 1024-byte URL. The overflow may allow remote code execution in the context of the web server process.
Description
Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long URL or (2) a request with a long method name.
Exploits (1)
This Perl script exploits a buffer overflow vulnerability in PlanetWeb web server by sending a maliciously crafted GET request with a 1024-byte URL. The overflow may allow remote code execution in the context of the web server process.