CVE-2006-6853
Durian Web Application Server 3.02 - Remote Code Execution via Long String in Crafted TCP Packet
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-6853. PoCs published by rgod.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Durian Web Application Server 3.02 for Win32. It sends a crafted payload to trigger the overflow and execute arbitrary shellcode, which spawns a command shell.
Description
Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary code via a long string in a crafted packet to TCP port 4002.
Exploits (2)
This exploit targets a buffer overflow vulnerability in Durian Web Application Server 3.02 for Win32. It sends a crafted payload to trigger the overflow and execute arbitrary shellcode, which spawns a command shell.
This exploit targets Durian Web Application Server 3.02 for Win32 by sending malformed packets to trigger access violations, resulting in a denial of service (DoS). It iterates through various buffer sizes and characters to flood the target with 1000 requests.