Exploitation Summary
EIP tracks 2 public exploits for CVE-2011-3493. PoCs published by mr_me, Luigi Auriemma.
AI-analyzed exploit summary This exploit targets a Unicode buffer overflow in Cogent DataHub <= v7.1.1.63, delivering a reverse shell on port 1337. It uses a crafted payload with alignment adjustments and shellcode to achieve remote code execution.
Description
Multiple stack-based buffer overflows in the DH_OneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) domain, (2) report_domain, (3) register_datahub, or (4) slave commands.
Exploits (2)
This exploit targets a Unicode buffer overflow in Cogent DataHub <= v7.1.1.63, delivering a reverse shell on port 1337. It uses a crafted payload with alignment adjustments and shellcode to achieve remote code execution.
This exploit targets a stack-based Unicode buffer overflow in Cogent DataHub's DH_OneSecondTick function via commands like 'domain' or 'register_datahub'. The PoC sends a crafted payload over port 4052 (or 4053 with SSL) to trigger the vulnerability.