CVE-2018-6892 PoC — CloudMe 缓冲区错误漏洞

Source

https://github.com/latortuga71/CVE-2018-6892-Golang

Associated Vulnerability

Title: CloudMe 缓冲区错误漏洞 (CVE-2018-6892)
Description:An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution.

Description

Ported Exploit From Python To Golang

Readme

# CVE-2018-6892-Golang
Ported Exploit From Python To Golang

* https://packetstormsecurity.com/files/157407/CloudMe-1.11.2-Buffer-Overflow.html

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →