Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-4060. PoCs published by vade79.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in corehttp v0.5.3alpha by overflowing the `url` buffer in the `HttpSprockMake` function, allowing arbitrary code execution via a crafted HTTP request. The exploit includes shellcode for a bind shell on port 7979.
Description
Multiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5.3alpha allow remote attackers to execute arbitrary code via a long string in the (1) method name or (2) URI in an HTTP request.
Exploits (1)
This exploit targets a buffer overflow vulnerability in corehttp v0.5.3alpha by overflowing the `url` buffer in the `HttpSprockMake` function, allowing arbitrary code execution via a crafted HTTP request. The exploit includes shellcode for a bind shell on port 7979.