CVE-2005-2772
University of Minnesota gopher client 3.0.9 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-2772. PoCs published by vade79.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in the Internet Gopher Client (v3.0.9+) via the '+VIEWS:' processing function. It delivers a bindshell payload to achieve remote code execution on the client system.
Description
Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary code via (1) a long "+VIEWS:" reply, which is not properly handled in the VIfromLine function, and (2) certain arguments when launching third party programs such as a web browser from a web link, which is not properly handled in the FIOgetargv function.
Exploits (1)
This exploit targets a stack-based buffer overflow in the Internet Gopher Client (v3.0.9+) via the '+VIEWS:' processing function. It delivers a bindshell payload to achieve remote code execution on the client system.