CVE-2006-3252
PrivateWire Gateway <= 3.7 - Remote Code Execution via Long GET Request
Title source: manualExploitation Summary
EIP tracks 3 public exploits for CVE-2006-3252.
PoCs published by Metasploit, Michael Thumann, including Metasploit module exploits/windows/http/privatewire_gateway.
AI-analyzed exploit summary This exploit targets a buffer overflow in ADMCREG.EXE of PrivateWire Online Registration Facility (CVE-2006-3252). It leverages a JMP ESP instruction to redirect execution to the payload, with support for multiple Windows versions.
Description
Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to execute arbitrary code via a long GET request.
Exploits (3)
This exploit targets a buffer overflow in ADMCREG.EXE of PrivateWire Online Registration Facility (CVE-2006-3252). It leverages a JMP ESP instruction to redirect execution to the payload, with support for multiple Windows versions.
This exploit targets a buffer overflow in ADMCREG.EXE of PrivateWire Gateway, leveraging a crafted HTTP GET request to execute arbitrary shellcode via a JMP ESP technique in USER32.DLL.
This Metasploit module exploits a buffer overflow in ADMCREG.EXE of PrivateWire Online Registration Facility via a crafted HTTP request. It targets multiple Windows versions with specific return addresses to achieve remote code execution.