CVE-2007-6258
mod_jk2 < 2.0.3-DEV - Remote Code Execution via Long Host Header
Title source: manualExploitation Summary
EIP tracks 2 public exploits for CVE-2007-6258. PoCs published by INetCop Security, Heretic2.
AI-analyzed exploit summary This exploit targets a remote buffer overflow in Apache Tomcat Connector jk2-2.0.2 (mod_jk2) on Fedora Core 6,7,8 with exec-shield. It sends a crafted payload to achieve remote code execution, demonstrated by spawning a reverse shell.
Description
Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long (1) Host header, or (2) Hostname within a Host header.
Exploits (2)
This exploit targets a remote buffer overflow in Apache Tomcat Connector jk2-2.0.2 (mod_jk2) on Fedora Core 6,7,8 with exec-shield. It sends a crafted payload to achieve remote code execution, demonstrated by spawning a reverse shell.
This exploit targets a buffer overflow vulnerability in mod_jk2 v2.0.2 for Apache 2.0 Win32. It uses a non-alpha encoder to bypass the downcasing of the Host header and delivers a bind shell payload on port 9999.