CVE-2004-1317 Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command.
HighCVSS 7.5
EPSS 59.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command.
Affected products
No affected product data has been published yet.
References
- Debian Security Tracker CVE-2004-1317 vendor-advisory
- 20041227 [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc included mailing-list
- 20041228 Netcat v1.11 For Windows , New fixed version mailing-list
- 20041228 Re: [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc included mailing-list
- www.hat-squad.com vendor-advisory
- netcat-doexec-bo(18681) vdb-entry