CVE-2011-2900
EXPLOITED IN THE WILDshttpd 1.42 - Stack-based Buffer Overflow in _shttpd_put_dir Function
Title source: llmExploitation Summary
CVE-2011-2900 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 2 public exploits from researchers including nion, G13.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in shttpd/mongoose web servers (CVE-2011-2900) to achieve remote code execution. It uses a crafted HTTP PUT request with stack manipulation and ROP gadgets to execute a connect-back shellcode.
Description
Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function in io_dir.c in Simple HTTPD (shttpd) 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT request, as exploited in the wild in 2011.
Exploits (2)
This exploit targets a buffer overflow vulnerability in shttpd/mongoose web servers (CVE-2011-2900) to achieve remote code execution. It uses a crafted HTTP PUT request with stack manipulation and ROP gadgets to execute a connect-back shellcode.
This exploit sends a maliciously crafted HTTP PUT request with an oversized buffer to trigger a denial-of-service (DoS) condition in Simple HTTPd 1.42. The vulnerability is due to improper handling of long URIs, leading to a crash.