CVE-2001-0168

creationtimestamp| type| source ---|---|--- 2009-12-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16491 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/vnc/winvnchttpget.rb 2025-02-06 03:13:37+00:00| seen|...

CVE-2001-0168

CVE-2001-0168 affects AT&T WinVNC Windows server up to version 3.3.3r7. A buffer overflow in the HTTP handling (vncHTTPConnect/Log.cpp) can be triggered by an overly long HTTP GET when the DebugLevel registry key > 0, allowing remote code execution with the privileges of the VNC server user. P...

WinVNC Web Server GET Overflow

This module exploits a buffer overflow in the AT&T WinVNC version use exploit/windows/vnc/winvnc/httpget msf undefinedhttpget show actions ...actions... msf undefinedhttpget set ACTION msf undefinedhttpget show options ...show and set options... msf undefinedhttpget run This module requires...