CVE-2006-1148
PeerCast < 0.1217 - Remote Code Execution via Long HTTP GET Parameter
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2006-1148.
PoCs published by Metasploit, MC, hdm, including Metasploit module exploits/windows/http/peercast_url.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in PeerCast <= 0.1216 via a maliciously crafted URL parameter. It leverages a boundary error to execute arbitrary code on vulnerable Windows systems.
Description
Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the nextCGIarg function in servhs.cpp.
Exploits (5)
This Metasploit module exploits a stack buffer overflow in PeerCast <= 0.1216 via a maliciously crafted URL parameter. It leverages a boundary error to execute arbitrary code on vulnerable Windows systems.
This is a Metasploit module exploiting a stack-based buffer overflow in PeerCast <= 0.1216 via maliciously crafted URL parameters. It sends a long URL to trigger the overflow and execute arbitrary shellcode.
This exploit targets a stack-based buffer overflow in PeerCast <= 0.1216 via a maliciously crafted HTTP GET request with an overly long URL parameter. It leverages a known return address to execute arbitrary shellcode on Linux x86 systems.
This Metasploit module exploits a stack buffer overflow in PeerCast <= v0.1216 via a maliciously crafted URL parameter. It leverages a known CVE (2006-1148) to achieve remote code execution by overwriting the return address and injecting shellcode.
This Metasploit module exploits a stack buffer overflow in PeerCast <= v0.1216 via a maliciously crafted URL parameter. It sends a long string to trigger the overflow and redirect execution to shellcode.