CentOS 6.5
mkdir -p abc2mtex
wget https://github.com/mudongliang/source-packages/raw/master/CVE-2004-1257/abc2mtex1.6.1.tar.gz
tar -xvf abc2mtex1.6.1.tar.gz
make
./abc2mtex 79.abc
abc2mtex Buffer Overflow in process_abc() Lets Remote Users Execute Arbitrary Code
ABC2MTEX 1.6.1 - Process ABC Key Field Buffer Overflow
NOTE: if you want to get right PoC file content from webpage, you need qprint
to decode the content in the webpage.
In abc.c, process_abc() uses strcat() to copy data from entry->KEY into a 99-byte key[] array; entry->KEY is read by getsIn(), which allows up to 999 bytes of data.