CVE-2017-7269
CRITICAL KEV NUCLEIInternet Information Services 6.0 - Remote Code Execution via WebDAV PROPFIND Request
Title source: llmExploitation Summary
CVE-2017-7269 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021.
EIP tracks 28 public exploits from researchers including Metasploit, Zhiniang Peng & Chen Wu, zcgonvh, including a Metasploit module exploits/windows/iis/iis_webdav_scstoragepathfromurl.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in the ScStoragePathFromUrl function in IIS 6.0 WebDAV service via a crafted PROPFIND request with a long 'If' header. It achieves remote code execution by leveraging a brute-force approach to determine the correct path length for the overflow.
Description
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.
Exploits (28)
This Metasploit module exploits a buffer overflow in the ScStoragePathFromUrl function in IIS 6.0 WebDAV service via a crafted PROPFIND request with a long 'If' header. It achieves remote code execution by leveraging a brute-force approach to determine the correct path length for the overflow.
This exploit targets a buffer overflow vulnerability in the ScStoragePathFromUrl function in IIS 6.0 on Windows Server 2003 R2. It crafts a malicious PROPFIND request with an overly long header to trigger the overflow and execute arbitrary code via a ROP chain and shellcode.
This is a Metasploit module for CVE-2017-7269, a buffer overflow in Microsoft IIS 6.0 WebDAV service. It includes fixes for physical path length and host binding issues, enabling reliable exploitation for remote code execution.
The repository contains only a README.md file with minimal information about CVE-2017-7269, an IIS 6.0 exploit, but no actual exploit code or technical details.
This PoC exploits CVE-2017-7269, a buffer overflow vulnerability in Microsoft IIS 6.0, to achieve remote code execution. It sends a maliciously crafted PROPFIND request with embedded shellcode to trigger the vulnerability and verify successful exploitation via a response check.
This is a functional exploit for CVE-2017-7269, targeting a buffer overflow in Microsoft IIS WebDAV's ScStoragePathFromUrl function. It supports payload delivery via webshell upload or shellcode execution, with options for testing and process termination.
This is a Python-based exploit for CVE-2017-7269, targeting Microsoft IIS 6.0 via a buffer overflow in the WebDAV service. The exploit sends a maliciously crafted PROPFIND request with shellcode to achieve remote code execution.
This is a Metasploit module for CVE-2017-7269, a buffer overflow in IIS 6.0's WebDAV service. It exploits a vulnerability in the ScStoragePathFromUrl function via a malformed PROPFIND request with a long header starting with 'If: <http://'.
This is a working exploit for CVE-2017-7269, a buffer overflow vulnerability in Microsoft IIS 6.0. The exploit sends a malicious PROPFIND request to trigger the vulnerability and execute a reverse shell payload.
This is a Ruby exploit for CVE-2017-7269, targeting a buffer overflow in IIS 6.0 WebDAV via the ScStoragePathFromUrl function. It includes multiple payloads for RCE, such as launching calc.exe, BSOD, message box, command execution, and adding a local admin account.
This is a Python-based exploit for CVE-2017-7269, targeting a buffer overflow vulnerability in Microsoft IIS WebDAV. It generates a reverse shell shellcode and sends it to the target to achieve remote code execution.
This is a functional exploit for CVE-2017-7269, a buffer overflow in the ScStoragePathFromUrl function in IIS 6.0 on Windows Server 2003 R2. The PoC sends a crafted PROPFIND request with a long header to trigger remote code execution, launching calc.exe via a ROP chain.
This is a Rust implementation of a PoC for CVE-2017-7269, a stack-based buffer overflow in IIS 6.0 WebDAV. It exploits the vulnerability via a crafted PROPFIND request with an overly long If: header to achieve remote code execution.
This repository contains a Python-based scanner for detecting CVE-2017-7269, a buffer overflow vulnerability in Microsoft IIS 6.0. The tool checks for vulnerable endpoints via HTTP OPTIONS requests and supports Telegram notifications for detected vulnerabilities.
This repository contains a functional Perl exploit for CVE-2017-7269, a buffer overflow vulnerability in the ScStoragePathFromUrl function in IIS 6.0 WebDAV service. The exploit sends a crafted PROPFIND request with a long 'If' header to trigger remote code execution.
This exploit targets CVE-2017-7269, a buffer overflow vulnerability in Microsoft IIS 6.0. It crafts a malicious PROPFIND request with a shellcode payload to achieve remote code execution.
This repository contains a functional exploit for CVE-2017-7269, a buffer overflow vulnerability in Microsoft IIS 6.0. The exploit sends a crafted PROPFIND request with shellcode to achieve remote code execution, specifically a reverse shell.
This repository contains a proof-of-concept exploit for CVE-2017-7269, a buffer overflow vulnerability in Microsoft Windows Server 2003 R2's WebDAV service. The exploit targets the ScStoragePathFromUrl function via a maliciously crafted PROPFIND request with a long header.
This is a Python exploit for CVE-2017-7269, a buffer overflow vulnerability in the ScStoragePathFromUrl function in IIS 6.0 on Windows Server 2003 R2. It sends a malicious HTTP request to trigger the overflow and execute shellcode for a reverse shell.
This repository contains a functional Perl exploit for CVE-2017-7269, a buffer overflow vulnerability in the ScStoragePathFromUrl function in IIS 6.0 WebDAV service. The exploit sends a crafted PROPFIND request with a long 'If' header to trigger remote code execution.
The repository contains a README describing CVE-2017-7269, a buffer overflow vulnerability in IIS 6.0 on Windows Server 2003 R2. The vulnerability allows remote code execution via a malformed PROPFIND request with a long 'If: <http://' header.
This is a scanner for CVE-2017-7269, a buffer overflow vulnerability in Microsoft IIS 6.0. It checks for the presence of the vulnerability by sending PROPFIND requests and analyzing the response status code (207 indicates vulnerability).
This Metasploit module exploits a buffer overflow in the ScStoragePathFromUrl function in IIS 6.0 WebDAV service via a malformed PROPFIND request with a long 'If' header. It includes a ROP chain to bypass DEP and achieve remote code execution.
This repository contains a functional Metasploit module for CVE-2017-7269, a buffer overflow vulnerability in the ScStoragePathFromUrl function in IIS 6.0 WebDAV service. The exploit sends a crafted PROPFIND request with a long header to trigger arbitrary code execution.
This repository contains a functional exploit for CVE-2017-7269, a buffer overflow vulnerability in Microsoft IIS 6.0. The exploit includes shellcode to establish a reverse shell connection to an attacker-controlled system.
This repository contains a functional exploit for CVE-2017-7269, a buffer overflow vulnerability in Microsoft IIS 6.0. The PoC sends a crafted PROPFIND request with a malicious If header containing shellcode to achieve remote code execution.
Nuclei Templates (1)
cpe:"cpe:2.3:a:microsoft:internet_information_server"
References (11)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H