CVE-2004-1373
SHOUTcast 1.9.4 - Remote Code Execution via Format String in Content URL
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2004-1373.
PoCs published by Metasploit, mandragore, pucik, including Metasploit module exploits/windows/http/shoutcast_format.
AI-analyzed exploit summary This is a Metasploit module exploiting a format string vulnerability in SHOUTcast DNAS/win32 1.9.4. The exploit crafts a malicious URI with format string specifiers to trigger a buffer overflow, leading to remote code execution.
Description
Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.
Exploits (4)
This is a Metasploit module exploiting a format string vulnerability in SHOUTcast DNAS/win32 1.9.4. The exploit crafts a malicious URI with format string specifiers to trigger a buffer overflow, leading to remote code execution.
This exploit targets a format string vulnerability in Nullsoft SHOUTcast 1.9.4, leveraging a two-step process to overwrite the stack and achieve remote code execution via a bindshell. It includes shellcode and targets specific Windows versions (XP SP1, 2k SP4).
This exploit targets a format string vulnerability in SHOUTcast DNAS/Linux v1.9.4, using a two-stage attack to overwrite memory addresses and execute a bind shell on port 7000. The first request injects shellcode, while the second uses format string manipulation to control execution flow.
This Metasploit module exploits a format string vulnerability in SHOUTcast DNAS/win32 1.9.4 by sending a maliciously crafted file request, leading to remote code execution. The exploit leverages a format string overflow to overwrite memory and execute arbitrary payloads.