high7.5Public exploit code
CVE-2004-1317
Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a lon…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Netcat 1.10 - NT Stack Buffer Overflow (Metasploit)2010-06-22 · remote · windows · Verified
- Netcat 1.1 - '-e' Switch Remote Buffer Overflow2004-12-26 · remote · windows · Verified
Impact
Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110425875504586&w=2
- http://marc.info/?l=bugtraq&m=110426936423890&w=2
- http://marc.info/?l=bugtraq&m=110429204712327&w=2
- http://www.hat-squad.com/en/000142.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18681
- http://marc.info/?l=bugtraq&m=110425875504586&w=2
- http://marc.info/?l=bugtraq&m=110426936423890&w=2
- http://marc.info/?l=bugtraq&m=110429204712327&w=2
- http://www.hat-squad.com/en/000142.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18681