CVE-2006-5850
Essentia Web Server 2.15 - Remote Code Execution via Long URI
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-5850. PoCs published by CorryL, B-r00t.
AI-analyzed exploit summary This exploit sends a maliciously long HTTP GET request to Essentia Web Server 2.15, causing a denial-of-service (DoS) condition. The payload consists of 6800 'A' characters, which triggers a buffer overflow or resource exhaustion in the target server.
Description
Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code via a long URI, as demonstrated by a GET or HEAD request. NOTE: some of these details are obtained from third party information.
Exploits (2)
This exploit sends a maliciously long HTTP GET request to Essentia Web Server 2.15, causing a denial-of-service (DoS) condition. The payload consists of 6800 'A' characters, which triggers a buffer overflow or resource exhaustion in the target server.
This exploit demonstrates a remote buffer overflow in Essentia Web Server v2.12 (Linux) by sending an excessively long URL (2000+ bytes) to trigger a denial of service or execute arbitrary code. The exploit binds a root shell to port 36864 upon successful exploitation.