Exploitation Summary
EIP tracks 4 public exploits for CVE-2004-0430.
PoCs published by Metasploit, Dino Dai Zovi, H D Moore, including Metasploit module exploits/osx/afp/loginext.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in AppleFileServer on MacOS X (CVE-2004-0430) by sending a maliciously crafted AFP packet with an oversized path name to trigger remote code execution. It includes a Metasploit module with a hardcoded return address for Mac OS X 10.3.3.
Description
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.
Exploits (4)
This exploit targets a stack buffer overflow in AppleFileServer on MacOS X (CVE-2004-0430) by sending a maliciously crafted AFP packet with an oversized path name to trigger remote code execution. It includes a Metasploit module with a hardcoded return address for Mac OS X 10.3.3.
This exploit targets a buffer overflow vulnerability in AppleFileServer (CVE-2004-0430) to achieve remote code execution. It sends a maliciously crafted FPloginEXT packet to trigger the overflow and execute a portbind shellcode, providing a root shell on the target system.
This exploit targets a stack overflow vulnerability in the AppleFileServer service on MacOS X 10.3.3. It crafts a malicious AFP packet with an oversized path name to trigger the overflow and execute arbitrary payloads.
This Metasploit module exploits a stack buffer overflow in the AppleFileServer service on MacOS X (CVE-2004-0430) by sending a maliciously crafted AFP packet with an oversized path name to trigger remote code execution.