4
Netatalk缓冲区溢出漏洞(CVE-2018-1160)
source link: https://827607240.github.io/2020/11/02/Netatalk_CVE-2018-1160/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
Netatalk缓冲区溢出漏洞（CVE-2018-1160）
Netatalk是一款用于在Linux平台上提供Appletalk网络协议服务的服务器。
漏洞影响范围
Netatalk 3.1.12之前版本中的dsi_opensess.c文件存在越界写入漏洞，该漏洞源于程序对攻击者控制的数据缺少边界检查。远程攻击者可利用该漏洞执行任意代码。
验证脚本https://github.com/tenable/poc/tree/master/netatalk/cve_2018_1160
python pea.py -i 192.168.88.252 -lvRecommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK