CVE-2020-14871-Exploit

CVE 2020-14871 Solaris エクスプロイト これは CVE 2020-14871 向けの基本的な ROP ベースのエクスプロイトです。CVE 2020-14871 は Sun Solaris システムの脆弱性です。 実際の脆弱性は、PAM の parseusername 関数に存在する古典的なスタックベースのバッファオーバーフローです。 SSH クライアント設定を操作して Keyboard-Interactive 認証にユーザー名のプロンプトを表示させることで到達可能であり、 攻撃者は PAM の parseusername 関数に無制限の入力を渡すことができます。51...

The vulnerability of the parse_user_name() function in the libpam library of the Pluggable Authentication Module of the Solaris operating system allows a perpetrator to gain full control over the application.

The vulnerability of the parseusername function in the libpam library, a plugin for the Pluggable Authentication Module of the Solaris operating system, is related to an operation that goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor, operating remotel...

CVE-2020-27678

An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022. There is a buffer overflow in parseusername in lib/libpam/pamframework.c...

Buffer overflow

An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022. There is a buffer overflow in parseusername in lib/libpam/pamframework.c...

CVE-2020-27678

An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022. There is a buffer overflow in parseusername in lib/libpam/pamframework.c...