23 matches found
Linux Kernel /dev/ptmx Key Stroke Timing Local Disclosure
Exploit for linux/x86 platform in category dos / poc !/bin/bash ptmx-su-pwdlen.sh -- This PoC determine the password length of a local user who runs "su -". Done thanks to the ptmx keystroke timing attack CVE-2013-0160. See http://vladz.devzero.fr/013ptmx-timing.php for more information. Tested o...
Inter-Keystroke Timing Proof Of Concept
!/bin/bash ptmx-su-pwdlen.sh -- This PoC determine the password length of a local user who runs "su -". Done thanks to the ptmx keystroke timing attack CVE-2013-0160. See http://vladz.devzero.fr/013ptmx-timing.php for more information. Tested on Debian 6.0.5 kernel 2.6.32-5-amd64. "THE BEER-WARE...
Linux Kernel '/dev/ptmx'文件本地信息泄露漏洞
Bugtraq ID:57176 CVE ID:CVE-2013-0160 Linux是一款开源的操作系统 "/dev/ptmx"是一款字符设备,用于创建伪终端master设备和slave设备,在击键时可通过PTM输送数据。"/dev/ptmx"存在一个安全漏洞,非特权本地用户漏洞通过判断击键间的延迟,来猜测输入密码的长度 0 Linux kernel 3.x Linux kernel 2.6.x 厂商解决方案 目前没有详细解决方案提供: http://www.linux.org/ http://vladz.devzero.fr/013ptmx-timing.php...