CVE-2007-2031
3proxy 0.5-0.5.3g - Remote Code Execution via Transparent Request Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-2031. PoCs published by Xpl017Elz, vade79.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in 3proxy HTTP Proxy 0.5.3g on Fedora Core 5/6. It leverages exec-shield bypass techniques to execute a reverse connect-back shell via crafted HTTP requests.
Description
Buffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, and 0.6b-devel before 20070413, might allow remote attackers to execute arbitrary code via crafted transparent requests.
Exploits (3)
This exploit targets a buffer overflow vulnerability in 3proxy HTTP Proxy 0.5.3g on Fedora Core 5/6. It leverages exec-shield bypass techniques to execute a reverse connect-back shell via crafted HTTP requests.
This exploit targets a buffer overflow vulnerability in 3proxy v0.5.3g on Windows. It crafts a malicious HTTP request with a long 'Host' header to overwrite EIP and execute shellcode, resulting in a bind shell on port 7979.
This exploit targets a remote buffer overflow in 3proxy v0.5.3g via a crafted HTTP GET request with a long Host header. It includes shellcode for both bind and connect-back shells, leveraging a stack-based overflow in the logurl() function.