Exploitation Summary
EIP tracks 2 public exploits for CVE-2003-0805. PoCs published by V9.
AI-analyzed exploit summary This exploit targets a buffer overflow in UMN gopherd's GSisText() function, allowing remote code execution via a crafted gopher request. It uses brute-force to guess stack addresses and includes shellcode for a bindshell.
Description
Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type.
Exploits (2)
This exploit targets a buffer overflow in UMN gopherd's GSisText() function, allowing remote code execution via a crafted gopher request. It uses brute-force to guess stack addresses and includes shellcode for a bindshell.
This exploit targets a buffer overflow vulnerability in the UMN gopherd FTP gateway component (CVE-2003-0805). It leverages a long filename in the FTP LIST command to overflow a stack buffer, leading to remote code execution.