Apache Chunked-Encoding Memory Corruption Vulnerability

Functional exploit code is available.

A Metasploit Framework exploit has become available.

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

UPDATE (January 11, 2008): An updated exploit for CORE IMPACT is available.


 

Privacy Statement
Copyright 2010, SecurityFocus