Exploitation Summary
EIP tracks 3 public exploits for CVE-2004-1705. PoCs published by Nebunu, CoKi.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Citadel/UX (CVE-2004-1705) to achieve remote code execution. It leverages a crafted 'USER' command to overflow a buffer and redirect execution to a shellcode payload, which downloads and executes a backdoor.
Description
Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.
Exploits (3)
This exploit targets a buffer overflow vulnerability in Citadel/UX (CVE-2004-1705) to achieve remote code execution. It leverages a crafted 'USER' command to overflow a buffer and redirect execution to a shellcode payload, which downloads and executes a backdoor.
This exploit targets a buffer overflow in Citadel/UX's USER command handling, leveraging a ret-to-libc technique to bypass the tolower() function's interference with shellcode. It overwrites EIP with the address of system() and executes a command to add a root user.
This exploit targets a buffer overflow vulnerability in Citadel/UX by sending a crafted USER command with a 96-byte buffer filled with 'A' characters, causing a remote denial of service (DoS). The exploit includes a timeout mechanism for the connection and verifies the target host before sending the payload.