Posted by Marek Kroemeke on May 24
Hi there,
This is a quick writeup about some fun with apache based on CVE-2011-1938
that was disclosed yesterday. While the first POC was literally just a
trivial POC – the second one was written for self-educational purposes (we
leared quite a lot which is the most important thing) and we hope it might
be useful for some other vulnerabilities of this/similar type.
This is an old fashioned stack buffer overflow in the socket module,
problem…
Source: CVE-2011-1938 PHP socket_connect() stack buffer overflow
