CVE-2004-1561
Icecast <= 2.0.1 - Remote Code Execution via HTTP Header Overflow
Title source: llmExploitation Summary
EIP tracks 9 public exploits for CVE-2004-1561.
PoCs published by Metasploit, K-C0d3r, Delikon, including Metasploit module exploits/windows/http/icecast_header.
AI-analyzed exploit summary This exploit targets a buffer overflow in Icecast's header parsing, allowing remote code execution on Windows systems by overwriting the saved instruction pointer via 32 HTTP headers. It uses a Metasploit module to deliver a payload and includes a note about thread pool exhaustion due to ExitThread usage.
Description
Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers.
Exploits (9)
This exploit targets a buffer overflow in Icecast's header parsing, allowing remote code execution on Windows systems by overwriting the saved instruction pointer via 32 HTTP headers. It uses a Metasploit module to deliver a payload and includes a note about thread pool exhaustion due to ExitThread usage.
This exploit targets a buffer overflow vulnerability in Icecast 2.0.1 on Windows systems. It sends a malformed HTTP GET request with a long string of 'a' characters followed by shellcode that adds an administrator account with username 'X' and password 'X'.
This exploit targets a buffer overflow vulnerability in Icecast <= 2.0.1 on Win32 systems. It sends a malformed HTTP GET request with embedded shellcode to achieve remote code execution, spawning a reverse shell on port 9999.
This repository contains a functional exploit for CVE-2004-1561, targeting Icecast <= 2.0.1 on Win32 systems. The exploit leverages a buffer overflow in the HTTP header processing to achieve remote code execution, demonstrated with a reverse shell payload.
The repository claims to provide exploitation notes for CVE-2004-1561 but only contains a README directing users to download a specialized file format (.ctd) requiring external software. No actual exploit code or technical details are provided.
This repository contains a functional Python exploit for CVE-2004-1561, a buffer overflow vulnerability in Icecast <= 2.0.1. The exploit sends a crafted HTTP request with a malicious payload to achieve remote code execution on vulnerable Windows systems.
This repository contains a functional Python exploit for CVE-2004-1561, a buffer overflow vulnerability in the Icecast server. The exploit sends a crafted HTTP request with shellcode to achieve remote code execution (RCE) on vulnerable systems.
This repository contains a functional exploit for CVE-2004-1561, a buffer overflow vulnerability in Icecast <= 2.0.1 on Win32 systems. The exploit sends a malformed HTTP GET request with embedded shellcode to achieve remote code execution.
This exploit targets a buffer overflow in Icecast versions 2.0.1 and earlier by sending 32 HTTP headers to overwrite the saved instruction pointer on Win32 systems. It uses a custom payload with specific bad character restrictions and stack adjustments to achieve remote code execution.