Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2018-3295 PoC — Oracle Virtualization VM VirtualBox组件安全漏洞

Source
Associated Vulnerability
Title:Oracle Virtualization VM VirtualBox组件安全漏洞 (CVE-2018-3295)
Description:Oracle Virtualization是美国甲骨文(Oracle)公司的一套虚拟化解决方案。该方案用于统一管理从应用程序到磁盘的整个硬件和软件体系,可实现从桌面到数据中心的虚拟化。VM VirtualBox是其中的一个虚拟机组件。 Oracle Virtualization中的VM VirtualBox组件5.2.20之前版本的Core子组件存在安全漏洞。本地攻击者可利用该漏洞控制组件,影响数据的保密性、完整性和可用性。
Description
Exploitation of VirtualBox vulnerability (https://nvd.nist.gov/vuln/detail/CVE-2018-3295)
Readme
# e1000_vulnerability_exploit

## Installation

> $ ./install.sh

Only own version build are supported yet. Please choose *own* and *debug* to build your debug version.

Warning : During the process an error can occur, especially during the sources compilation. You can have something like "Exit with error status 2."

Please contact us at nicolas.dureisseix@etu.enseeiht.fr if an error occurs.

## Debug

Use RTLogPrintf(string, args) to print debug message. The debug will go into .log files in VirtualBox folder.

Look into the files :

* src/VBox/Devices/Network/DevE1000 .cpp / .h ;

* src/VBox/Devices/Network/DevEEPROM .cpp / .h.

You can use `cleanlog` script to clean all logs and `printlog` to print them in the console.

## VM

There is not script for VM creation/management yet. Please create a VM called ProjetLong with 2CPU Cores and 8Gb RAM.

Download `fake_driver` folder into the VM and run `load_fake_driver`. Use `reload_fake_driver` if you have already load the driver and you want to apply changes.

## Note

Some scripts will arrive to make it easier for users, on VM and VMM.
File Snapshot

[4.0K] /data/pocs/b53a4d9ea8f7eb7b1a947e9798431554cd8bc297 ├── [ 271] cleanlog.sh ├── [2.1M] DOC_E1000.pdf ├── [4.0K] fake_driver │   ├── [ 15K] e1k.c │   ├── [4.8K] e1k_utils.h │   ├── [ 277] load_fake_driver.sh │   ├── [ 544] Makefile │   └── [ 312] restore_network.sh ├── [4.9K] install.sh ├── [ 108] printlog.sh ├── [1.1K] README.md └── [1.1K] remake.sh 1 directory, 11 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.