Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-4006.
PoCs published by Metasploit, including Metasploit module exploits/windows/http/servu_session_cookie.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow in Rhinosoft Serv-U 9.0.0.5 via a maliciously crafted session cookie in a POST request. It includes SEH-based exploitation for Windows 2000/XP and NX bypass techniques for Windows 2003 SP2.
Description
Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string.
Exploits (2)
This is a Metasploit module exploiting a buffer overflow in Rhinosoft Serv-U 9.0.0.5 via a maliciously crafted session cookie in a POST request. It includes SEH-based exploitation for Windows 2000/XP and NX bypass techniques for Windows 2003 SP2.
This Metasploit module exploits a buffer overflow in Rhinosoft Serv-U 9.0.0.5 by sending a crafted POST request with an overly long session cookie, leading to arbitrary code execution. It includes SEH and NX bypass techniques for different Windows targets.