CVE-2015-0235 PoC — GNU glibc 基于堆的缓冲区错误漏洞

Source

https://github.com/1and1-serversupport/ghosttester

Associated Vulnerability

Title: GNU glibc 基于堆的缓冲区错误漏洞 (CVE-2015-0235)
Description:Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Description

Script to test vulnarability for CVE-2015-0235

Readme

### Testing Script for the Glibc GHOST Vulnerability # CVE-2015-0235

A little script I found to test the Glibc GHOST Vulnerability # CVE-2015-0235.
The usage is quite simple. Just clone or download the script to your server/desktop and
start it like this:

#### Debian/Ubuntu

    gcc ghosttest.c -o ghosttest

or:

    ./ghosttest.c

#### CentOS/RHEL/Suse

    ./ghosttest.sh

If your server/desktop is vulnerable you should perform an updata **ASAP**.

The pathced Version should be **glibc-2.12-1.149.el6_6.5.x86_64** or **glibc-2.12-1.149.el6_6.5.i686**.

On CentOS/RHEL/Suse you can find the version like this:

    rpm -q glibc

On Debian/Ubuntu you can use this command:

    aptitude show libc6 | grep Version

To fix the vulnerability just run an update, patches have been released.

Credit goes to: http://www.cyberciti.biz/faq/cve-2015-0235-patch-ghost-on-debian-ubuntu-fedora-centos-rhel-linux/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →