CVE-2017-7529 PoC — F5 Nginx 输入验证错误漏洞

Description

cve-2017-7529

介绍

��# CVE-2017-7529

[����\�(@portfolio10)](https://github.com/portfolio10/nginx)



## ��}�

 - �� �µ�@� Nginx ���X� Range �ƭ� �̬� ������ ���XՔ� ���� ��}��(CVE-2017-7529)D� ���X��, ��}��X� ��� ٳ��

 - ��}��: Nginx Range ��T� �̬� $�X�\� x�t� ����� p�t�0� x��� ���

 - 
ƥ�: ��� ���� �|�X� ��� p�t�0�  ǜ�



## Xֽ� l�1� � �‰�

 - OS : Windows 10

 - Docker, Python

 1. ��� �	�0Ѭ��� ��T� ��1� 

 2. Dockerfile, poc.py, docker-compose.yml �|� ��1�

 3. 'docker compose up -d' �‰�

 4. http://127.0.0.1:8080 �� ȍ�X��� Nginx �‰� U�x�

 5. 'pip install requests' |� ��t� DՔ� |�t��췬� $�X�

 6. 'python poc.py http://127.0.0.1:8080' �‰�X��� ���� � U�x�.



## ����

![PoC �‰� ����](./result.png)



## ��`�

 - CVE-2017-7529�� Nginx ���� Range �ƭ�D� �ǻ� �̬�X��� ���XՔ� ��
�\� ���� x��� ��}��t��.

 - �����ǔ� ��� OffsetD� ����X��� ��� p�t�0�|�  ǜ�`� � ���.

 - H��\� ��
�D� �t���� Nginx ��� ��p�tǸ�, ���� �(� $�� �T�, Range �ƭ��� �\� D�0��� 
ȩ�XՔ� ��t� ɔ�X��.[

文件快照

备注