CVE-2007-4006
Mike Dubman Windows RSH daemon (rshd) 1.7 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-4006.
PoCs published by Metasploit, Joey Mengele, including Metasploit module exploits/windows/misc/windows_rsh.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Windows RSH daemon 1.8. It sends a maliciously crafted payload to trigger the overflow and execute arbitrary code on the target system.
Description
Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-00000034. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.
Exploits (3)
This exploit targets a buffer overflow vulnerability in Windows RSH daemon 1.8. It sends a maliciously crafted payload to trigger the overflow and execute arbitrary code on the target system.
This exploit targets a stack overflow vulnerability in rshd.sourceforge.net's rshd service. It sends a crafted payload to trigger a buffer overflow and execute a bind shell on port 9999, allowing remote command execution.
This Metasploit module exploits a buffer overflow in Windows RSH daemon 1.8 by sending a crafted payload to TCP port 514, leveraging an unchecked input length vulnerability. It includes target-specific return addresses for Windows 2003 SP1, XP Pro SP2, and 2000 Pro SP4.