CVE-2004-2271 PoC — MiniShare超长URL处理远程任意指令执行漏洞

Source

https://github.com/kkirsche/CVE-2004-2271

Associated Vulnerability

Title:MiniShare超长URL处理远程任意指令执行漏洞 (CVE-2004-2271)
Description:MiniShare是一款文件共享系统。 MiniShare对超长URL请求处理不正确，远程攻击者可以利用这个漏洞对服务程序进行缓冲区溢出，可能以进程权限执行任意指令。攻击者提交超长的HTTP GET请求，可发生缓冲区溢出，尽心构建提交数据可能以进程权限执行任意指令。

Description

Minishare 1.4.1 Remote Buffer Overflow

Readme

# CVE-2004-2271
Minishare 1.4.1 Remote Buffer Overflow

![success.png](success.png)

File Snapshot


 [4.0K]  /data/pocs/421f511ed10e89cd5eebe355d9bf9ff0b9b420e4
├── [ 463]  01-proof-of-concept.py
├── [2.8K]  02-eip-locator.py
├── [ 422]  03-eip-validator.py
├── [1.7K]  04-bad-chars.py
├── [ 452]  05-jmp-esp.py
├── [2.8K]  06-exploit.py
├── [1.3K]  LICENSE
├── [ 66K]  minishare-1.4.1.zip
├── [  84]  README.md
└── [1.4M]  success.png

0 directories, 10 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!