CVE-2019-5544 PoC — VMware ESXi和VMware Horizon DaaS OpenSLP 缓冲区错误漏洞

Source

https://github.com/dgh05t/VMware_ESXI_OpenSLP_PoCs

Associated Vulnerability

Title:VMware ESXi和VMware Horizon DaaS OpenSLP 缓冲区错误漏洞 (CVE-2019-5544)
Description:VMware ESXi和VMware Horizon DaaS都是美国威睿（VMware）公司的产品。VMware ESXi是一套可直接安装在物理服务器上的服务器虚拟化平台。VMware Horizon DaaS是一套专为以云计算服务形式交付桌面和应用而构建的虚拟桌面平台。该平台提供多桌面模式和多数据中心管理等功能。OpenSLP是其中的一个IETF服务位置协议的开源实现。 VMware ESXi和VMware Horizon DaaS中的OpenSLP存在安全漏洞。攻击者可利用该漏洞执行代码。以下产品及

Description

CVE-2020-3992 & CVE-2019-5544

Readme

# VMware_ESXI_OpenSLP_PoCs
CVE-2020-3992 &amp; CVE-2019-5544

Tested on ESXI installed on VMware Workstation.
If on real mechine, you may need to change the srvtype field (service:VMwareInfrastructure).

File Snapshot


 [4.0K]  /data/pocs/b8c641975bf2d3f0ea334cef670042ab3c141795
├── [2.2K]  CVE_2019_5544.py
├── [1011]  CVE_2020_3992.py
└── [ 203]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!