Exploitation Summary
EIP tracks 3 public exploits for CVE-2007-0774.
PoCs published by Metasploit, Xpl017Elz, including Metasploit module exploits/windows/http/apache_modjk_overflow.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in Apache mod_jk 1.2.20 on Win32 systems. It crafts a malicious HTTP GET request to trigger the vulnerability and execute arbitrary shellcode.
Description
Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.
Exploits (3)
This is a Metasploit module exploiting a stack buffer overflow in Apache mod_jk 1.2.20 on Win32 systems. It crafts a malicious HTTP GET request to trigger the vulnerability and execute arbitrary shellcode.
This is a functional exploit for CVE-2007-0774, targeting a buffer overflow in Apache Tomcat Connector (mod_jk) on Fedora Core 5/6. It leverages exec-shield bypass techniques to achieve remote code execution via a crafted HTTP request.
This is a stack buffer overflow exploit for Apache mod_jk 1.2.20 on Win32 systems. It leverages a SEH overwrite to achieve remote code execution by sending a maliciously crafted HTTP GET request.