CVE-2002-1643
RealNetworks Helix Universal Server 9.0.2.768 - Remote Code Execution via RTSP/HTTP Request Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2002-1643.
PoCs published by Metasploit, Johnny Cyberpunk, H D Moore, including Metasploit module exploits/multi/realserver/describe.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in RealServer via a malformed RTSP DESCRIBE request. It targets multiple platforms (Linux, BSD, Windows) and includes a payload delivery mechanism.
Description
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments.
Exploits (4)
This Metasploit module exploits a buffer overflow in RealServer via a malformed RTSP DESCRIBE request. It targets multiple platforms (Linux, BSD, Windows) and includes a payload delivery mechanism.
This exploit targets a buffer overflow vulnerability in RealServer versions prior to 8.0.2 via a crafted RTSP SETUP request. It delivers a reverse shell payload to spawn a command shell on TCP port 31337.
This exploit targets a buffer overflow in RealServer 7/8/9 via a malformed RTSP DESCRIBE request. It uses a universal payload to achieve remote code execution on Linux, BSD, and Windows systems.
This Metasploit module exploits a buffer overflow in RealServer 7/8/9 via a malformed RTSP DESCRIBE request. It targets multiple platforms (Linux, BSD, Windows) and delivers a payload encoded in hex to achieve remote code execution.