CVE-2015-0235 PoC — GNU glibc 基于堆的缓冲区错误漏洞

Source

https://github.com/chayim/GHOSTCHECK-cve-2015-0235

Associated Vulnerability

Title: GNU glibc 基于堆的缓冲区错误漏洞 (CVE-2015-0235)
Description:Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Description

A check for GHOST; cve-2015-0235

Readme

# Ghostcheck

This is a really, really light fabric script - for checking the impact of CVE-2015-0235 (GHOST) on a running linux host. Forked into Lyrical after writing.

Python 2.6 and higher recommended, and Fabric is needed.

Usage:

fab -f ghostcheck.py -u _sshusername_ -p _sshpassword_ -H _ip_,_ip2_,_ipN_ go

fab -f ghostcheck.py -u _sshusername_ -i _/path/to/ssh/key_ -H _ip_,_ip2_,_ipN_ go

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →