Exploitation Summary
EIP tracks 4 public exploits for CVE-2007-4566. PoCs published by SkuLL-HackeR, His0k4, blake.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in SidVault 2.0e via LDAP, using a SEH-based approach to execute arbitrary shellcode (calc.exe in this case). The payload is crafted with a Metasploit-generated alpha-numeric shellcode and a universal return address.
Description
Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind.
Exploits (4)
This exploit targets a buffer overflow vulnerability in SidVault 2.0e via LDAP, using a SEH-based approach to execute arbitrary shellcode (calc.exe in this case). The payload is crafted with a Metasploit-generated alpha-numeric shellcode and a universal return address.
This is a Metasploit module exploiting a buffer overflow in SIDVault 2.0e's LDAP service via a maliciously crafted LDAP request. It achieves remote code execution by overflowing the buffer with a payload and precise return address manipulation.
This exploit targets a buffer overflow vulnerability in SIDVault 2.0e, leveraging a crafted LDAP bind request to execute a shell_bind_tcp payload on Windows XP SP3. The payload binds a shell to port 4444, granting remote command execution.
This exploit targets a buffer overflow vulnerability in Alpha Centauri Software SIDVault LDAP Server, allowing remote code execution via a crafted LDAP packet. The shellcode is designed to spawn a shell, and the exploit leverages a JMP ESP address in linux-gate.so.