Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-1759. PoCs published by Michael Brooks.
AI-analyzed exploit summary This exploit leverages a stack-based buffer overflow in cTorrent/dTorrent via a maliciously crafted torrent file. It injects shellcode to spawn a bind shell on port 4444, targeting the btFiles::BuildFromMI function.
Description
Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Torrent file containing a long path.
Exploits (1)
This exploit leverages a stack-based buffer overflow in cTorrent/dTorrent via a maliciously crafted torrent file. It injects shellcode to spawn a bind shell on port 4444, targeting the btFiles::BuildFromMI function.