cve/cves/2001/CVE-2001-0168.md

CVE-2001-0168

Description

Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.

ExploitDB

• https://www.exploit-db.com/exploits/16491

Metasploit

• https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/vnc/winvnc_http_get.rb