Ultra MiniHTTPd 1.2 - 'GET' Remote Stack Buffer Overflow (PoC)

Exploit Title: Ultra MiniHTTPd 1.2 - 'GET' Remote Stack Buffer Overflow Date: 2018-04-14 Exploit Author: jollymongrel Vendor Homepage: http://www.vector.co.jp Software Link: http://www.vector.co.jp/soft/winnt/net/se275154.html Version: 1.2 Tested on: Windows 7 32-bit CVE : CVE-2013-5019 import sy...

Ultra Mini HTTPD Resource Name Request Handling Stack Buffer Overflow - Ver2 (CVE-2013-5019)

A buffer overflow vulnerability has been reported in Vector Ultra Mini HTTPD. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

CVE-2013-5019

CVE-2013-5019 involves Ultra Mini HTTPD (notably v1.21) and a stack-based buffer overflow triggered by a long resource name in an HTTP GET request. The underlying flaw allows remote attackers to potentially execute arbitrary code. Public references document a PoC and exploits (Exploit-DB entries ...

CVE-2013-5019

creationtimestamp| type| source ---|---|--- 2013-07-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26739 2013-08-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27608 2014-02-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31736 2014-02-22...