Exploitation Summary
EIP tracks 2 public exploits for CVE-2004-2416.
PoCs published by Ruder, aushack, including Metasploit module exploits/windows/proxy/ccproxy_telnet_ping.
AI-analyzed exploit summary This exploit targets a stack overflow vulnerability in CCProxy by sending a maliciously crafted HTTP request with embedded shellcode. The shellcode is XOR-encoded and dynamically modifies the IP and port for a reverse shell connection.
Description
Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request.
Exploits (2)
This exploit targets a stack overflow vulnerability in CCProxy by sending a maliciously crafted HTTP request with embedded shellcode. The shellcode is XOR-encoded and dynamically modifies the IP and port for a reverse shell connection.
This Metasploit module exploits a stack-based buffer overflow in CCProxy's Telnet service via an overly long 'ping' command. It targets multiple Windows versions with specific return addresses to achieve remote code execution.