CVE-2005-0338
Savant Web Server 3.1 - Remote Code Execution via Long HTTP Request
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-0338. PoCs published by Jerome Athias, CorryL, Tal Zeltzer.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Savant web server (CVE-2005-0338) to achieve remote code execution. It uses a crafted HTTP request with shellcode to spawn a reverse shell or add a user, depending on the payload.
Description
Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.
Exploits (3)
This exploit targets a buffer overflow vulnerability in Savant web server (CVE-2005-0338) to achieve remote code execution. It uses a crafted HTTP request with shellcode to spawn a reverse shell or add a user, depending on the payload.
This exploit targets a buffer overflow vulnerability in Savant Web Server 3.1, sending a crafted HTTP GET request with a payload that overwrites the EIP register to execute arbitrary shellcode, resulting in the creation of an administrator account.
This exploit targets a buffer overflow vulnerability in Savant web server, delivering a Metasploit-generated shellcode payload to add a user. It uses a hardcoded return address for Windows 2000 SP0-4 and sends the malicious buffer via a socket connection.