Vulnerabilities > CVE-2007-2711 - Remote Buffer Overflow vulnerability in TinyIdentD
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long string to TCP port 113.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
description TinyIdentD <= 2.2 Remote Buffer Overflow Exploit. CVE-2007-2711. Remote exploit for windows platform file exploits/windows/remote/3925.py id EDB-ID:3925 last seen 2016-01-31 modified 2007-05-14 platform windows port 113 published 2007-05-14 reporter Thomas Pollet source https://www.exploit-db.com/download/3925/ title TinyIdentD <= 2.2 - Remote Buffer Overflow Exploit type remote description TinyIdentD 2.2 Stack Buffer Overflow. CVE-2007-2711. Remote exploit for windows platform id EDB-ID:16444 last seen 2016-02-01 modified 2010-09-20 published 2010-09-20 reporter metasploit source https://www.exploit-db.com/download/16444/ title TinyIdentD 2.2 - Stack Buffer Overflow
Metasploit
| description | This module exploits a stack based buffer overflow in TinyIdentD version 2.2. If we send a long string to the ident service we can overwrite the return address and execute arbitrary code. Credit to Maarten Boone. |
| id | MSF:EXPLOIT/WINDOWS/MISC/TINY_IDENTD_OVERFLOW |
| last seen | 2020-05-26 |
| modified | 2020-05-23 |
| published | 2007-05-22 |
| references | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2711 |
| reporter | Rapid7 |
| source | https://github.com/rapid7/metasploit-framework/blob/master//modules/exploits/windows/misc/tiny_identd_overflow.rb |
| title | TinyIdentD 2.2 Stack Buffer Overflow |
Packetstorm
| data source | https://packetstormsecurity.com/files/download/83191/tiny_identd_overflow.rb.txt |
| id | PACKETSTORM:83191 |
| last seen | 2016-12-05 |
| published | 2009-11-26 |
| reporter | acaro |
| source | https://packetstormsecurity.com/files/83191/TinyIdentD-2.2-Stack-Overflow.html |
| title | TinyIdentD 2.2 Stack Overflow |