Exploit OpenSSH 2.x/3.x - Kerberos 4 TGT/AFS Token Buffer Overflow

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
21402
Проверка EDB
  1. Пройдено
Автор
MARCELL FODOR
Тип уязвимости
REMOTE
Платформа
LINUX
CVE
cve-2002-0575
Дата публикации
2002-04-19
Код:
source: https://www.securityfocus.com/bid/4560/info

A buffer overflow condition exists in the OpenSSH server. The condition is exploitable by attackers with valid user credentials in versions 2.9.9 and higher. Exploitation does not require valid user credentials in versions prior to 2.9.9.

The vulnerability is related to the handling of Kerberos 4 TGT/AFS tokens passed by the client. An unbounded string copy operation may result in a stack overflow if the TGT/token data is malformed. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/21402.tar
 
Источник
www.exploit-db.com

Похожие темы