CVE-2020-11984 PoC — Apache HTTP Server 缓冲区错误漏洞

Source

https://github.com/masahiro331/CVE-2020-11984

Associated Vulnerability

Title:Apache HTTP Server 缓冲区错误漏洞 (CVE-2020-11984)
Description:Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

Readme

# Quick start

```
docker build --no-cache -t cve-2020-11984 .
docker run --rm -it -p 8080:80 --name cve-2020-11984 cve-2020-11984
pipenv run python3 exploit.py -u localhost:8080/ -c "echo 111>/tmp/abc"
```

# Reference
```
https://github.com/RubenBar/MLW-upcrans/
```

File Snapshot


 [4.0K]  /data/pocs/2b2acc8c4add8c178e13fcb78b158c11c54b3084
├── [2.5K]  Dockerfile
├── [2.1K]  exploit.py
├── [ 153]  Pipfile
├── [ 10K]  Pipfile.lock
├── [ 269]  README.md
├── [ 550]  supervisord.conf
└── [ 329]  upstream.py

0 directories, 7 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →