mcrypt <= 2.5.8 Stack Based Overflow

No description provided by source. !/usr/bin/perl Title : mcrypt = 2.5.8 STACK based overflow Date : 23/11/2012 Exploit Author : Tosh CVE : CVE-2012-4409 Patch : http://www.openwall.com/lists/oss-security/2012/09/06/8 Tested on : Archlinux 3.6.6-1, without SSP This script exploit a stack based...

mcrypt 2.6.8 - Stack Buffer Overflow (PoC)

!/usr/bin/env python mcrypt = 2.6.8 stack-based buffer overflow poc http://mcrypt.sourceforge.net/ the command line tool, not the library date: 2012-09-04 exploit author: ishikawa tested on: ubuntu 12.04.1 tech: it overflows in checkfilehead when decrypting .nc files with too long salt data...

CVE-2012-4409

Stack-based buffer overflow in the checkfilehead function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption...

CVE-2012-4409: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the checkfilehead function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption...

mcrypt 2.6.8 Buffer Overflow Proof Of Concept

!/usr/bin/env python mcrypt = 2.6.8 stack-based buffer overflow poc http://mcrypt.sourceforge.net/ the command line tool, not the library date: 2012-09-04 exploit author: ishikawa tested on: ubuntu 12.04.1 tech: it overflows in checkfilehead when decrypting .nc files with too long salt data...