CVE-2003-0213
PoPToP PPTP Server - Denial of Service via Invalid Control Packet Length
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2003-0213.
PoCs published by Metasploit, blightninjas, einstein, including Metasploit module exploits/linux/pptp/poptop_negative_read.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow in Poptop PPTP server (CVE-2003-0213) via a malformed packet with a negative length value. It includes brute-forcing for return addresses and dynamic payload space calculation.
Description
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow.
Exploits (6)
This is a Metasploit module exploiting a buffer overflow in Poptop PPTP server (CVE-2003-0213) via a malformed packet with a negative length value. It includes brute-forcing for return addresses and dynamic payload space calculation.
This exploit targets a buffer overflow vulnerability in PoPToP PPTP server versions older than 1.1.4-b3 and 1.1.3-20030409. It sends a maliciously crafted ECHO_RQST packet to overwrite the return address and execute shellcode, resulting in a reverse shell connection.
This exploit targets a buffer overflow vulnerability in PoPToP PPTP server versions prior to 1.1.4-b3 and 1.1.3-20030409. It bruteforces the return address to execute a reverse shell payload, granting root privileges.
This exploit targets a buffer overflow vulnerability in PoPToP PPTP server versions older than 1.1.4-b3 and 1.1.3-20030409. It sends a maliciously crafted ECHO_RQST packet to overflow the buffer and execute arbitrary shellcode, resulting in remote code execution.
This is a Metasploit exploit module for CVE-2003-0213, targeting a buffer overflow in Poptop PPTP server versions prior to 1.1.3-b3 and 1.1.3-20030409. It uses a brute-force approach to achieve remote code execution by manipulating packet lengths and return addresses.
This is a Metasploit module exploiting a buffer overflow in Poptop PPTP server (CVE-2003-0213) via a malformed packet with a negative read length. It targets Linux systems and uses brute-forcing to bypass ASLR by guessing stack addresses.