CVE-2005-3252
Snort - Stack-based Buffer Overflow via Back Orifice Preprocessor
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2005-3252.
PoCs published by Metasploit, xort, xwings, including Metasploit module exploits/linux/ids/snortbopre.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in the Back Orifice pre-processor module in Snort versions 2.4.0 to 2.4.3. It uses a UDP-based payload to achieve remote code execution, typically gaining root or administrative privileges.
Description
Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet.
Exploits (6)
This exploit targets a stack buffer overflow in the Back Orifice pre-processor module in Snort versions 2.4.0 to 2.4.3. It uses a UDP-based payload to achieve remote code execution, typically gaining root or administrative privileges.
This exploit targets a buffer overflow in Snort's Back Orifice preprocessor (CVE-2005-3252) by sending a maliciously crafted UDP packet. It includes shellcode for a connect-back shell to port 21 on a specified IP.
This exploit targets a buffer overflow vulnerability in Snort 2.4.0-2.4.2's Back Orifice preprocessor. It crafts a malicious packet with shellcode to achieve remote code execution via a UDP socket.
This exploit targets a buffer overflow in Snort's BackOrifice preprocessor (CVE-2005-3252) by crafting a malicious UDP packet with encrypted headers and shellcode. It leverages stack manipulation to achieve remote code execution, specifically a bind shell on port 31337.
This exploit targets a stack overflow in the Back Orifice pre-processor module in Snort versions 2.4.0 to 2.4.3. It uses a UDP-based payload with encryption to achieve remote code execution, typically gaining root privileges.
This Metasploit module exploits a stack buffer overflow in the Back Orifice pre-processor of Snort versions 2.4.0-2.4.3, allowing remote code execution with root privileges via a maliciously crafted UDP packet.