CVE-2005-1344
Apache HTTP Server 2.0.52 - Buffer Overflow via Long Realm Argument
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-1344. PoCs published by K-sPecial, Luca Ercoli.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the htdigest utility of Apache by supplying an overly long realm value. It includes shellcode for a reverse shell connection to a specified IP and port, demonstrating remote code execution (RCE) in the context of the web server process.
Description
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.
Exploits (2)
This exploit targets a buffer overflow vulnerability in the htdigest utility of Apache by supplying an overly long realm value. It includes shellcode for a reverse shell connection to a specified IP and port, demonstrating remote code execution (RCE) in the context of the web server process.
This exploit targets a buffer overflow vulnerability in the htdigest utility of Apache. It crafts a malicious input to overflow the buffer, redirecting execution to shellcode that spawns a reverse shell.