CVE-2019-5544 PoC — VMware ESXi和VMware Horizon DaaS OpenSLP 缓冲区错误漏洞

Source

https://github.com/vpxuser/VMware-ESXI-OpenSLP-Exploit

Associated Vulnerability

Title:VMware ESXi和VMware Horizon DaaS OpenSLP 缓冲区错误漏洞 (CVE-2019-5544)
Description:VMware ESXi和VMware Horizon DaaS都是美国威睿（VMware）公司的产品。VMware ESXi是一套可直接安装在物理服务器上的服务器虚拟化平台。VMware Horizon DaaS是一套专为以云计算服务形式交付桌面和应用而构建的虚拟桌面平台。该平台提供多桌面模式和多数据中心管理等功能。OpenSLP是其中的一个IETF服务位置协议的开源实现。 VMware ESXi和VMware Horizon DaaS中的OpenSLP存在安全漏洞。攻击者可利用该漏洞执行代码。以下产品及

Description

CVE-2019-5544和CVE-2020-3992漏洞利用脚本

Readme

# VMware ESXI OpenSLP Exploit

- cve-2019-5544栈溢出漏洞利用脚本，脚本未经过测试，可能会利用失败

```shell
python3 cve-2019-5544.py -t target.com -c whoami
```

File Snapshot


 [4.0K]  /data/pocs/9857c91b9163fe9e765ed7786406d7ef9be2f873
└── [ 184]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!