RTOS-F-16-Exploit---CVE-2019-7711

Green Hills INTEGRITY RTOS F-16 漏洞利用 - CVE-2019-7711 完整格式化字符串利用链 针对 F-16 航空电子设备的真实地面维护攻击 📋 描述 该仓库包含一个针对 CVE-2019-7711 的概念验证（PoC） ——这是 Interpeak IPCOMShell TELNET 服务器（属于 Green Hills INTEGRITY RTOS 5.0.4）中的一个格式化字符串漏洞。 该漏洞利用演示了一条现实完整的攻击链 ，瞄准 F-16 战隼 （Block 60 及类似型号）的彩色显示处理器（CDP）和任务系统，发生在地面维护 期间。 🔄...

CVE-2019-7711

🛡️ CVE-2019-7711: Green Hills INTEGRITY RTOS 信息泄露 📌 关于 Green Hills INTEGRITY RTOS v5.0.4 Telnet 服务器中 格式化字符串 漏洞的技术文档和资源仓库。 📖 概述 该漏洞影响 Green Hills INTEGRITY RTOS 5.0.4 中 Interpeak 的 IPCOMShell Telnet 服务器，其中一个未文档化的命令解释器允许配置命令输入的值。该值直接被用作 printf 函数的输入，未经任何验证 ，从而允许执行恶意格式化字符串。 🔍 影响 ✅ 严重信息泄露...

Exploit for Use of Externally-Controlled Format String in Ghs Integrity_Rtos

🛡️ CVE-2019-7711: Green Hills INTEGRITY RTOS Information Lea...

EUVD-2019-17243

Malware in sbrugna...

EUVD-2019-17244

Malware in sbrugna...

EUVD-2019-17247

Malware in sbrugna...

EUVD-2019-17245

Malware in sbrugna...

CVE-2019-7715

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The main shell handler function uses the value of the environment variable ipcom.shell.greeting as the first argument to printf. Setting this variable using the sysvar command results in a...

Format string

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The main shell handler function uses the value of the environment variable ipcom.shell.greeting as the first argument to printf. Setting this variable using the sysvar command results in a...

CVE-2019-7715

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The main shell handler function uses the value of the environment variable ipcom.shell.greeting as the first argument to printf. Setting this variable using the sysvar command results in a...

CVE-2019-7713

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. There is a heap-based buffer overflow in the function responsible for printing the shell prompt, when a custom modifier is used to display information such as a process ID, IP address, or curren...

CVE-2019-7711

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The undocumented shell command "prompt" sets the user controlled shell's prompt value, which is used as a format string input to printf, resulting in an information leak of memory addresses...

CVE-2019-7712

An issue was discovered in handleripcomshellpwd in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. When using the pwd command, the current working directory path is used as the first argument to printf without a proper check. An attacker may thus forge a path containin...

CVE-2019-7711

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The undocumented shell command "prompt" sets the user controlled shell's prompt value, which is used as a format string input to printf, resulting in an information leak of memory addresses...

Format string

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The undocumented shell command "prompt" sets the user controlled shell's prompt value, which is used as a format string input to printf, resulting in an information leak of memory addresses...

Heap overflow

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. There is a heap-based buffer overflow in the function responsible for printing the shell prompt, when a custom modifier is used to display information such as a process ID, IP address, or curren...

Format string

An issue was discovered in handleripcomshellpwd in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. When using the pwd command, the current working directory path is used as the first argument to printf without a proper check. An attacker may thus forge a path containin...

CVE-2019-7712

An issue was discovered in handleripcomshellpwd in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. When using the pwd command, the current working directory path is used as the first argument to printf without a proper check. An attacker may thus forge a path containin...

CVE-2019-7715

CVE-2019-7715 affects Green Hills INTEGRITY RTOS 5.0.4 via the Interpeak IPCOMShell TELNET server. The main shell handler uses the environment variable ipcom.shell.greeting as the first argument to printf(), making it possible for an attacker to supply a user-controlled format string during login...

CVE-2019-7715

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The main shell handler function uses the value of the environment variable ipcom.shell.greeting as the first argument to printf. Setting this variable using the sysvar command results in a...