CVE-2005-0575
Stormy Studios Knet <= 1.04c - Buffer Overflow via Long HTTP GET Request
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2005-0575. PoCs published by Wireghoul, Myo Soe, CorryL.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in KNet Web Server 1.04b by sending a maliciously crafted HTTP request with a payload that overwrites EIP and executes shellcode (spawning calc.exe). The PoC includes a NOP sled and a hardcoded return address to trigger execution.
Description
Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP GET request.
Exploits (5)
This exploit targets a stack-based buffer overflow in KNet Web Server 1.04b by sending a maliciously crafted HTTP request with a payload that overwrites EIP and executes shellcode (spawning calc.exe). The PoC includes a NOP sled and a hardcoded return address to trigger execution.
This exploit targets a buffer overflow vulnerability in KNet Web Server 1.04b via a crafted HTTP GET request. It leverages SEH overwrite with a bind shell payload to achieve remote code execution on Windows 7.
This exploit demonstrates a remote buffer overflow in KNet <= 1.04c by sending a maliciously crafted GET request with an oversized buffer (1023 bytes of 'A's). The PoC triggers a denial-of-service condition by overwriting the EIP register, causing the server to crash.
This exploit targets a buffer overflow vulnerability in KNet Web Server 1.04b via a crafted HTTP GET request, leveraging SEH overwrite with an egghunter to execute a bind shell on TCP port 4444. The PoC includes shellcode and requires minor adjustments (e.g., target IP) to function.
This is a functional exploit for CVE-2005-0575, targeting a buffer overflow vulnerability in an unspecified software. It includes shellcode and a crafted HTTP request to trigger the exploit.