CVE-2002-2258
Moby NetSuite - Denial of Service via Malformed Content-Length Header
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-2258. PoCs published by Matthew Murphy.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in Moby NetSuite via a malformed POST request with an excessively long Content-Length header, leading to a denial of service (DoS). The PoC is straightforward and directly triggers the crash by sending the crafted request.
Description
Moby NetSuite allows remote attackers to cause a denial of service (crash) via an HTTP POST request with a (1) large integer or (2) non-numeric value in the Content-Length header, which causes an access violation after a failed atoi function call.
Exploits (1)
This exploit demonstrates a buffer overflow vulnerability in Moby NetSuite via a malformed POST request with an excessively long Content-Length header, leading to a denial of service (DoS). The PoC is straightforward and directly triggers the crash by sending the crafted request.