CVE-2005-0478
TrackerCam <= 5.12 - Buffer Overflow via Long User-Agent Header or PHP Script Argument
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-0478.
PoCs published by Metasploit, hdm, including Metasploit module exploits/windows/http/trackercam_phparg_overflow.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in TrackerCam's PHP argument handling (CVE-2005-0478) to achieve remote code execution. It first uses a directory traversal flaw to fingerprint the system before triggering the overflow via a maliciously crafted 'userID' parameter.
Description
Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP request with a long User-Agent header or (2) a long argument to an arbitrary PHP script.
Exploits (2)
This Metasploit module exploits a stack buffer overflow in TrackerCam's PHP argument handling (CVE-2005-0478) to achieve remote code execution. It first uses a directory traversal flaw to fingerprint the system before triggering the overflow via a maliciously crafted 'userID' parameter.
This Metasploit module exploits a stack buffer overflow in TrackerCam's PHP argument handling to achieve remote code execution. It leverages a directory traversal flaw to fingerprint the system before triggering the overflow via a crafted HTTP request.