Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-1584. PoCs published by Stefan Esser.
AI-analyzed exploit summary This exploit targets a buffer underflow vulnerability in PHP's header() function (CVE-2007-1584) to achieve remote code execution. It uses a PPC MacOSX reverse shell payload and leverages the substr_compare() vulnerability to calculate memory offsets dynamically.
Description
Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by passing an all-whitespace string to this function, which causes it to write '\0' characters in whitespace that precedes the string.
Exploits (2)
This exploit targets a buffer underflow vulnerability in PHP's header() function (CVE-2007-1584) to achieve remote code execution. It uses a PPC MacOSX reverse shell payload and leverages the substr_compare() vulnerability to calculate memory offsets dynamically.
This exploit targets a buffer underflow vulnerability in PHP's ext/filter module (CVE-2007-1584) to achieve remote code execution. It uses a PPC MacOSX reverse shell payload and leverages heap manipulation to overwrite memory addresses.