Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-0594. PoCs published by Gyan Chawdhary.
AI-analyzed exploit summary This exploit targets a memory corruption vulnerability in PHP (CVE-2004-0594) by manipulating the `memory_limit` setting to trigger a heap overflow, allowing arbitrary code execution via shellcode. It uses crafted HTTP requests to corrupt memory structures and execute a reverse shell on port 36864.
Description
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.
Exploits (1)
This exploit targets a memory corruption vulnerability in PHP (CVE-2004-0594) by manipulating the `memory_limit` setting to trigger a heap overflow, allowing arbitrary code execution via shellcode. It uses crafted HTTP requests to corrupt memory structures and execute a reverse shell on port 36864.