CVE-2004-2271 PoC — MiniShare超长URL处理远程任意指令执行漏洞

Source

https://github.com/war4uthor/CVE-2004-2271

Associated Vulnerability

Title:MiniShare超长URL处理远程任意指令执行漏洞 (CVE-2004-2271)
Description:MiniShare是一款文件共享系统。 MiniShare对超长URL请求处理不正确，远程攻击者可以利用这个漏洞对服务程序进行缓冲区溢出，可能以进程权限执行任意指令。攻击者提交超长的HTTP GET请求，可发生缓冲区溢出，尽心构建提交数据可能以进程权限执行任意指令。

Description

CVE-2004-2271 - Minishare 1.4.1 HTTP Server Remote Buffer Overflow Vulnerability. Tested on Windows XP Professional SP3.

Readme

# CVE-2004-2271

File Snapshot


 [4.0K]  /data/pocs/a1ce212acc7fb8a044bbbeede7834e44077f5876
├── [ 359]  http-get-fuzz.py
├── [2.0K]  minishare-http.py
└── [  16]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!