CVE-2004-1701
Cfengine 2.0.0-2.1.7p1 - Remote Code Execution via Long SAUTH Command
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-1701. PoCs published by jsk, Juan Pablo Martinez Kuhn.
AI-analyzed exploit summary This exploit targets a heap-based buffer overflow in cfengine cfservd's AuthenticationDialogue() function, allowing remote code execution via a crafted challenge. It includes a connect-back shellcode and bypasses IP-based access control.
Description
Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication.
Exploits (2)
This exploit targets a heap-based buffer overflow in cfengine cfservd's AuthenticationDialogue() function, allowing remote code execution via a crafted challenge. It includes a connect-back shellcode and bypasses IP-based access control.
This exploit targets a heap-based buffer overflow in GNU cfengine cfservd's AuthenticationDialogue() function. It sends malformed CAUTH and SAUTH commands with excessive data to trigger the vulnerability, potentially allowing remote code execution.