CVE-2009-3711
httpdx 1.4 - Stack-based Buffer Overflow via Long HTTP GET Request
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2009-3711.
PoCs published by Metasploit, Pankaj Kohli, including Metasploit module exploits/windows/http/httpdx_handlepeer.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack-based buffer overflow in HTTPDX 1.4 via an overly long HTTP request to the 'h_handlepeer()' function. It achieves remote code execution by overwriting the SEH record and jumping to shellcode.
Description
Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
Exploits (3)
This is a Metasploit module exploiting a stack-based buffer overflow in HTTPDX 1.4 via an overly long HTTP request to the 'h_handlepeer()' function. It achieves remote code execution by overwriting the SEH record and jumping to shellcode.
This exploit targets a buffer overflow vulnerability in httpdx web server 1.4 via a long GET request. It includes shellcode for a port-binding shell on Windows XP SP3 and demonstrates remote code execution.
This Metasploit module exploits a stack-based buffer overflow in HTTPDX 1.4 via an overly long HTTP request to the 'h_handlepeer()' function, allowing arbitrary code execution. It uses SEH overwrites and a jump-back technique to trigger the payload.