Exploitation Summary
EIP tracks 7 public exploits for CVE-2004-2687.
PoCs published by H D Moore, h3x0v3rl0rd, k4miyo, including Metasploit module exploits/unix/misc/distcc_exec.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits CVE-2004-2687 in distccd by sending a crafted request to execute arbitrary commands via the distcc protocol. It leverages the lack of authentication in distccd to achieve remote code execution.
Description
distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks.
Exploits (7)
This Metasploit module exploits CVE-2004-2687 in distccd by sending a crafted request to execute arbitrary commands via the distcc protocol. It leverages the lack of authentication in distccd to achieve remote code execution.
This repository contains a functional Python3 exploit for CVE-2004-2687, a remote code execution vulnerability in distccd versions prior to 3.1. The exploit leverages improper authentication in the distccd daemon to execute arbitrary commands via crafted network packets.
This repository contains a functional Python exploit for CVE-2004-2687, a command execution vulnerability in the DistCC daemon. The exploit crafts a malicious payload to achieve remote code execution via the DistCC protocol.
This repository contains a functional Python exploit for CVE-2004-2687, a remote code execution vulnerability in distccd. The exploit crafts a malicious payload to execute arbitrary commands on the target system by leveraging the distcc protocol's argument handling.
This repository provides a functional exploit for CVE-2004-2687, targeting the DistCC daemon (distccd) via Metasploit. It includes step-by-step instructions to achieve remote code execution (RCE) on a vulnerable Metasploitable 2 target.
This Metasploit module exploits a documented security weakness in distccd (CVE-2004-2687) to execute arbitrary commands via the distcc protocol. It sends a crafted DIST packet with a command payload to trigger remote code execution.