Exploitation Summary
EIP tracks 4 public exploits for CVE-2012-10053.
PoCs published by Metasploit, mr.pr0n, mr.pr0n, juan vazquez, including Metasploit module exploits/windows/http/sws_connection_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Simple Web Server 2.2 rc2 via a maliciously crafted Connection header. It achieves remote code execution by overwriting the EIP and leveraging a 'call edi' instruction from libstdc++-6.dll.
Description
Simple Web Server 2.2 rc2 contains a stack-based buffer overflow vulnerability in its handling of the Connection HTTP header. When a remote attacker sends an overly long string in this header, the server uses vsprintf() without proper bounds checking, leading to a buffer overflow on the stack. This flaw allows remote attackers to execute arbitrary code with the privileges of the web server process. The vulnerability is triggered before authentication.
Exploits (4)
This Metasploit module exploits a stack-based buffer overflow in Simple Web Server 2.2 rc2 via a maliciously crafted Connection header. It achieves remote code execution by overwriting the EIP and leveraging a 'call edi' instruction from libstdc++-6.dll.
This exploit targets a remote buffer overflow in SimpleWebServer 2.2-rc2 by sending a crafted HTTP request with an egghunter and shellcode to achieve remote code execution. It binds a shell on TCP port 4444.
This Metasploit module exploits a stack-based buffer overflow in Simple Web Server 2.2 rc2 via a maliciously crafted Connection header. It leverages a vsprintf() vulnerability to achieve arbitrary code execution on Windows XP SP3 and Windows 7 SP1.
This Metasploit module exploits a buffer overflow in Simple Open Music Player v1.0 via a crafted m3u file, allowing arbitrary code execution. It uses a standard stack-based overflow technique with a return address override.
References (6)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N