CVE-2002-1549
Light HTTPd 0.1 - Remote Code Execution via Long HTTP GET Request
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2002-1549. PoCs published by Jacob Holcomb, uid0x00, Xpl017Elz.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in Windows Light HTTPD v0.1 via a maliciously crafted HTTP GET request. It uses a NOP sled, a JMP ESP address from ntdll.dll, and encoded shellcode to achieve remote code execution.
Description
Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
Exploits (3)
This exploit targets a stack-based buffer overflow in Windows Light HTTPD v0.1 via a maliciously crafted HTTP GET request. It uses a NOP sled, a JMP ESP address from ntdll.dll, and encoded shellcode to achieve remote code execution.
This exploit targets a buffer overflow vulnerability in Light httpd 0.1 by sending an excessively long GET request. It includes shellcode to bind a shell to a specified port, leveraging a JMP ESP address in USER32.DLL for execution.
This exploit targets a buffer overflow vulnerability in Light HTTPd by sending an excessively long GET request. It includes shellcode for a bind shell on port 36864, demonstrating remote code execution with 'nobody' privileges.