Description
Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-00000034. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Windows RSH Daemon Buffer Overflow
exploit/windows/misc/windows_rsh
Exploit-DB 2
- Microsoft Windows RSH daemon - Remote Buffer Overflow (Metasploit) EDB-16427 · remote · Apr 30, 2010 · verified
- Microsoft Windows RSH daemon 1.7 - Remote Buffer Overflow EDB-4222 · remote · Jul 24, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.