CVE-2015-0235 PoC — GNU glibc 基于堆的缓冲区错误漏洞

Source

Associated Vulnerability

Title: GNU glibc 基于堆的缓冲区错误漏洞 (CVE-2015-0235)
Description:Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Description

CVE-2015-0235

Readme

# CVE-glibc
## CVE-2015-0235
## glibc Get Host by Name Issue

### Copy and paste to get/check
```
wget https://github.com/alanmeyer/CVE-glibc/raw/master/get-GHOST.sh
chmod +x get-GHOST.sh
./get-GHOST.sh

```

### References:
####https://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html
####http://www.openwall.com/lists/oss-security/2015/01/27/9
####https://webshare.uchicago.edu/orgs/ITServices/itsec/Downloads/GHOST.c
####http://www.cyberciti.biz/files/scripts/GHOST-test.sh.txt

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →