Exploitation Summary
EIP tracks 6 public exploits for CVE-2004-0313.
PoCs published by Metasploit, Rave, NoRpiuS, including Metasploit module exploits/windows/http/psoproxy91_overflow.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in PSO Proxy v0.91 by sending an excessively long string to the web server, overwriting the stack and executing arbitrary code.
Description
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long (1) GET argument or (2) method name.
Exploits (6)
This Metasploit module exploits a stack-based buffer overflow in PSO Proxy v0.91 by sending an excessively long string to the web server, overwriting the stack and executing arbitrary code.
This exploit targets a buffer overflow vulnerability in PSOProxy v0.91 by sending a crafted HTTP GET request with a long string of 'A's followed by a shellcode address and the shellcode itself. It spawns a bindshell on port 28876.
This exploit targets a remote buffer overflow vulnerability in PSOProxy v0.91. It crafts a malicious buffer with a return address and shellcode to achieve remote code execution.
This exploit targets a remote buffer overflow vulnerability in PSOProxy 0.91, leveraging a crafted payload to execute arbitrary shellcode. It spawns a reverse shell on port 9191 by overwriting the return address with a JMP ESP instruction from USER32.DLL.
This exploit targets a buffer overflow vulnerability in PSOProxy v0.91, sending a crafted payload with shellcode to open a reverse shell on port 4444. The exploit uses a large buffer filled with NOP sleds and shellcode to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in PSO Proxy v0.91 by sending an excessively long string to overwrite the stack, leading to remote code execution. It includes multiple return addresses for different Windows versions and languages.