CVE-1999-0874

Related Files

Microsoft IIS 4.0 .HTR Path Overflow

Posted Nov 26, 2009

Authored by stinko | Site metasploit.com

This exploits a buffer overflow in the ISAPI ISM.DLL used to process HTR scripting in IIS 4.0. This Metasploit module works against Windows NT 4 Service Packs 3, 4, and 5. The server will continue to process requests until the payload being executed has exited. If you've set EXITFUNC to 'seh', the server will continue processing requests, but you will have trouble terminating a bind shell. If you set EXITFUNC to thread, the server will crash upon exit of the bind shell. The payload is alpha-numerically encoded without a NOP sled because otherwise the data gets mangled by the filters.

tags | exploit, overflow, shell

systems | windows

advisories | CVE-1999-0874

SHA-256 | c0284698cfd346698336fc945b0632cf0c7ba907c5406d8c5e64e623fd0a639b

Download | Favorite | View