CVE-2006-2022
Fenice < 1.10 - Remote Code Execution via RTSP URL Parsing Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-2022. PoCs published by Xpl017Elz, c0d3r.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Fenice OMS server (version 1.10) on Fedora Core 6 with exec-shield. It leverages ROP (Return-Oriented Programming) techniques to bypass memory protections and execute arbitrary code, specifically launching xterm with a display argument pointing to an attacker-controlled xhost IP.
Description
Buffer overflow in the parse_url function in the RTSP module (rtsp/parse_url.c) in Fenice 1.10 and earlier allows remote attackers to execute arbitrary code via a long URL.
Exploits (2)
This exploit targets a buffer overflow vulnerability in Fenice OMS server (version 1.10) on Fedora Core 6 with exec-shield. It leverages ROP (Return-Oriented Programming) techniques to bypass memory protections and execute arbitrary code, specifically launching xterm with a display argument pointing to an attacker-controlled xhost IP.
This is a functional exploit for CVE-2006-2022, targeting a buffer overflow vulnerability in Fenice Open Media Streaming Server. It uses a metasploit-derived shellcode to achieve remote code execution via a crafted GET request.