CVE-2007-1260
WebMod 0.48 - Stack-Based Buffer Overflow via Content-Length HTTP Header
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-1260. PoCs published by cybermind, thecybermind.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in WebMod v0.48 by sending a maliciously crafted POST request with an oversized Content-Length header. It overwrites the EIP to redirect execution to shellcode that spawns a MessageBox and terminates the process.
Description
Stack-based buffer overflow in the connectHandle function in server.cpp in WebMod 0.48 allows remote attackers to execute arbitrary code via a long string in the Content-Length HTTP header.
Exploits (2)
This exploit targets a stack-based buffer overflow in WebMod v0.48 by sending a maliciously crafted POST request with an oversized Content-Length header. It overwrites the EIP to redirect execution to shellcode that spawns a MessageBox and terminates the process.
This repository contains a functional exploit PoC for CVE-2007-1260, a stack buffer overflow in WebMod v0.48. The exploit leverages an improperly bounded Content-Length header to overwrite EIP and execute arbitrary shellcode, with specific offsets and shellcode provided for Win32 targets.