CVE-2005-4270
Watchfire AppScan QA 5.0.609 and 5.0.134 - Remote Code Execution via Long Realm Field in WWW-Authenticate Header
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-4270. PoCs published by Mariano Nuñez.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Watchfire AppScan QA by serving a malicious 401 response with embedded shellcode. The PoC sets up a fake web server that triggers the exploit when a request for the 'admin' resource is detected.
Description
Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticate header containing a long Realm field.
Exploits (1)
This exploit targets a buffer overflow vulnerability in Watchfire AppScan QA by serving a malicious 401 response with embedded shellcode. The PoC sets up a fake web server that triggers the exploit when a request for the 'admin' resource is detected.