CVE-2004-0397
Subversion <= 1.0.2 - Remote Code Execution via DAV2 REPORT Query or get-dated-rev Command
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2004-0397.
PoCs published by Metasploit, Gyan Chawdhary, spoonm, including Metasploit module exploits/multi/svn/svnserve_date.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow in Subversion's svnserve daemon (CVE-2004-0397) via malformed date parsing. It targets Linux and FreeBSD systems, using a brute-force approach to bypass ASLR.
Description
Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command.
Exploits (4)
This is a Metasploit module exploiting a buffer overflow in Subversion's svnserve daemon (CVE-2004-0397) via malformed date parsing. It targets Linux and FreeBSD systems, using a brute-force approach to bypass ASLR.
This exploit targets a stack overflow in the svn_time_from_cstring() function in Subversion 1.0.2. It crafts a malicious date format to overwrite the EIP and execute shellcode, binding a shell on port 36864.
This is a Metasploit exploit for CVE-2004-0397, targeting a buffer overflow in the Subversion svnserve daemon's date parsing functionality. It uses a brute-force approach to achieve remote code execution on Linux and FreeBSD systems.
This is a Metasploit module exploiting a buffer overflow in Subversion's svnserve daemon (CVE-2004-0397) via malformed date parsing. It targets Linux and FreeBSD systems by brute-forcing return addresses to achieve remote code execution.