CVE-2019-11287 PoC — Pivotal Software RabbitMQ 格式化字符串错误漏洞

Source

https://github.com/mbadanoiu/CVE-2019-11287

Associated Vulnerability

Title:Pivotal Software RabbitMQ 格式化字符串错误漏洞 (CVE-2019-11287)
Description:Pivotal Software RabbitMQ是美国Pivotal Software公司的一套实现了高级消息队列协议（AMQP）的开源消息代理软件。 Pivotal Software RabbitMQ中的Web管理插件存在安全漏洞。攻击者可通过插入恶意的Erlang格式化字符串利用该漏洞造成服务器崩溃。以下产品及版本受到影响：Pivotal Software RabbitMQ 3.7.21之前的3.7.x版本，3.8.1之前的3.8.x版本；RabbitMQ for Pivotal Platform

Description

CVE-2019-11287: DoS via Heap Overflow in RabbitMQ Web Management Plugin

Readme

# CVE-2019-11287: DoS via Heap Overflow in RabbitMQ Web Management Plugin

Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack.

The "X-Reason" HTTP Header can be leveraged to insert a malicious Erlang format string that will expand and consume the heap, resulting in the server crashing.

### Vendor Disclosure:

The vendor's disclosure and fix for this vulnerability can be found [here](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23833).

### Requirements:

This vulnerability requires:
<br/>
- Valid user credentials

### Proof Of Concept:

More details and the exploitation process can be found in this [PDF](https://github.com/mbadanoiu/CVE-2019-11287/blob/main/RabbitMQ%20-%20CVE-2019-11287.pdf).

File Snapshot


 [4.0K]  /data/pocs/b8679085b9b32c3db4505d115201c20d6aa57e19
├── [1.2M]  RabbitMQ - CVE-2019-11287.pdf
└── [ 974]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!