CVE-2006-3747
Apache HTTP Server 1.3.28-1.3.36 & 2.0.46-2.0.58 - DoS & RCE via mod_rewrite LDAP Handling
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2006-3747.
PoCs published by Metasploit, fabio/b0x, axis, including Metasploit module exploits/windows/http/apache_mod_rewrite_ldap.
AI-analyzed exploit summary This Metasploit module exploits an off-by-one buffer overflow in Apache's mod_rewrite LDAP protocol handling (CVE-2006-3747). It targets Windows systems by sending a maliciously crafted LDAP URI to trigger the vulnerability and execute arbitrary code.
Description
Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.
Exploits (6)
This Metasploit module exploits an off-by-one buffer overflow in Apache's mod_rewrite LDAP protocol handling (CVE-2006-3747). It targets Windows systems by sending a maliciously crafted LDAP URI to trigger the vulnerability and execute arbitrary code.
This exploit targets a buffer overflow vulnerability in Apache mod_rewrite on Windows systems, delivering a bind shell on port 4444. It uses a crafted HTTP GET request with shellcode to achieve remote code execution.
This exploit targets CVE-2006-3747, an off-by-one vulnerability in Apache mod_rewrite on Windows. It sends a crafted HTTP request with a reverse shell payload to achieve remote code execution.
This exploit targets CVE-2006-3747, an off-by-one overflow in Apache mod_rewrite. It sends a crafted HTTP GET request with shellcode to execute a bind shell on port 30464, leveraging a specific RewriteRule configuration.
This repository contains a functional exploit for CVE-2006-3747, an off-by-one buffer overflow in Apache's mod_rewrite module when processing LDAP URLs. The exploit includes a detailed technical analysis and a working shell script that triggers the vulnerability to achieve remote code execution.
This Metasploit module exploits an off-by-one buffer overflow in Apache's mod_rewrite LDAP protocol handling (CVE-2006-3747). It targets Windows systems by sending a maliciously crafted LDAP URI to overwrite EIP and execute arbitrary payloads.