RE: Apache 1.3.27 Remote Root 0-Day Exploit (OFFICIAL POST)

["Hudak, Tyler" <Tyler.Hudak () roadway com>]

Koec's "exploit" just executes the shell code on your own machine, as
evidenced by this line:

void(*b)()=(void*)shellcode;b();

All the rest of the program does is open a connection to the machine
specified on port 80 and then close it down (as can be safely seen by
removing that line).

I'm not a shellcode expert, so someone else will have to say what it does,
but its probably not pretty.

Unless someone can correct me, I'd avoid running this.

Tyler