Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-4611. PoCs published by DaveK, Michael Adams.
AI-analyzed exploit summary This is a remote buffer overflow PoC for dsock <= 1.3, exploiting insufficient validation of the 'name' variable in the tor_resolve function. The exploit uses an overlong hostname in an HTML anchor tag to trigger the overflow when processed by a dsocks-enabled browser.
Description
Buffer overflow in the _tor_resolve function in dsocks.c in dsocks before 1.4 allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long node name.
Exploits (2)
This is a remote buffer overflow PoC for dsock <= 1.3, exploiting insufficient validation of the 'name' variable in the tor_resolve function. The exploit uses an overlong hostname in an HTML anchor tag to trigger the overflow when processed by a dsocks-enabled browser.
This exploit demonstrates a remote buffer overflow in Dsocks by sending an excessively long HTTP request. The vulnerability arises from insufficient bounds checking, potentially allowing arbitrary code execution or denial-of-service.