NetWin DNews 5.3 Server Buffer Overflow Vulnerability

2000-03-01T00:00:00
ID EDB-ID:19895
Type exploitdb
Reporter Joey__
Modified 2000-03-01T00:00:00

Description

NetWin DNews 5.3 Server Buffer Overflow Vulnerability. CVE-2000-0423. Remote exploit for windows platform

                                        
                                            source: http://www.securityfocus.com/bid/1172/info

DNews News Server is a CGI application that gives access to auser's NNTP server over the web. There are many unchecked buffers in the program, some of which can be exploited directly from any browser. Supplying an overlylong value for the "group", "cmd" and "utag" variables, and possibly others, will overwrite their respective buffers. In this manner, arbitrary code can be executed on the remote target.

https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/19895.zip