CVE-2014-4158
Kolibri 2.0 - Remote Code Execution via Long URI in GET Request
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2014-4158. PoCs published by Revin Hadi Saputra, Polunchis.
AI-analyzed exploit summary This exploit targets a SEH overflow vulnerability in Kolibri WebServer 2.0 via a malformed HTTP GET request. It uses an egghunter to locate and execute shellcode, achieving remote code execution.
Description
Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET request.
Exploits (2)
This exploit targets a SEH overflow vulnerability in Kolibri WebServer 2.0 via a malformed HTTP GET request. It uses an egghunter to locate and execute shellcode, achieving remote code execution.
This exploit triggers a stack-based buffer overflow in Kolibri 2.0 via a maliciously crafted GET request, leading to remote code execution. It uses a Meterpreter bind shell payload and targets a specific return address to execute arbitrary code.