CVE-2005-0101
Newspost < 2.1.1 - Remote Code Execution via Long NNTP Response String
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-0101. PoCs published by cybertronic, Niels Heinen.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Newspost 2.1 via the 'socket_getline()' function. It includes both bind and reverse shell payloads for Linux systems, demonstrating remote code execution (RCE).
Description
Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long string without a newline character.
Exploits (2)
This exploit targets a buffer overflow vulnerability in Newspost 2.1 via the 'socket_getline()' function. It includes both bind and reverse shell payloads for Linux systems, demonstrating remote code execution (RCE).
This exploit demonstrates a buffer overflow vulnerability in Newspost 2.1.1 and prior versions. The issue arises in the 'socket_getline()' function when handling NNTP server responses, potentially leading to arbitrary code execution.