CVE-2007-2711
TinyIdentD < 2.2 - Remote Code Execution via Long String to TCP Port 113
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-2711.
PoCs published by Metasploit, Thomas Pollet, Maarten Boone, including Metasploit module exploits/windows/misc/tiny_identd_overflow.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in TinyIdentD 2.2 by sending a crafted string to the ident service (port 113), overwriting the return address to execute arbitrary code. It includes payload handling and specific return addresses for Windows 2000 SP4 and XP SP2.
Description
Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long string to TCP port 113.
Exploits (3)
This exploit targets a stack-based buffer overflow in TinyIdentD 2.2 by sending a crafted string to the ident service (port 113), overwriting the return address to execute arbitrary code. It includes payload handling and specific return addresses for Windows 2000 SP4 and XP SP2.
This exploit targets a buffer overflow vulnerability in tinyidentd by sending a crafted payload to port 113. It includes a NOP sled and alphanumeric shellcode to execute calc.exe, demonstrating remote code execution.
This Metasploit module exploits a stack-based buffer overflow in TinyIdentD 2.2 by sending a crafted string to the ident service (port 113), overwriting the return address to achieve remote code execution. It includes multiple return addresses for various Windows versions and service packs.