CVE-2010-0361
Sun Java System Web Server 7.0 Update 7 - Stack-Based Buffer Overflow via WebDAV OPTIONS Request
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2010-0361.
PoCs published by Metasploit, dmc, including Metasploit module exploits/multi/http/sun_jsws_dav_options.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in Sun Java System Web Server prior to version 7 Update 8 via an overly long OPTIONS request to a WebDAV-enabled directory, allowing arbitrary code execution. It includes SEH-based exploitation for Windows targets and is confirmed to work on Windows XP SP3 without DEP.
Description
Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request.
Exploits (4)
This Metasploit module exploits a buffer overflow in Sun Java System Web Server prior to version 7 Update 8 via an overly long OPTIONS request to a WebDAV-enabled directory, allowing arbitrary code execution. It includes SEH-based exploitation for Windows targets and is confirmed to work on Windows XP SP3 without DEP.
This exploit targets CVE-2010-0361 in Sun Java Web Server 7.0 u7, using a buffer overflow with ROP to bypass DEP and execute an egghunter to locate and trigger shellcode that adds a user.
This exploit targets a buffer overflow vulnerability in Sun Java Web Server 7.0 update 7 (CVE-2010-0361). It uses an egghunter technique to locate and execute shellcode that adds a user 'r00t' with password 'r00tr00t123'.
This Metasploit module exploits a buffer overflow in Sun Java System Web Server via an overly long OPTIONS request to a WebDAV-enabled directory, allowing arbitrary code execution. It includes SEH-based exploitation for Windows x86 targets and is confirmed to work on Windows XP SP3 without DEP.