CVE-2020-8597 PoC — ppp 缓冲区错误漏洞

Source

https://github.com/lakwsh/CVE-2020-8597

Associated Vulnerability

Title:ppp 缓冲区错误漏洞 (CVE-2020-8597)
Description:ppp是Paul PPP Package开源的一个实现点对点协议（ppp）的库。 ppp 2.4.2版本至2.4.8版本中的pppd的‘eap_request’和‘eap_response ’函数存在缓冲区错误漏洞，该漏洞源于程序没有正确检查边界。远程攻击者可借助特制EAP数据包利用该漏洞在系统上执行任意代码，或导致内存损坏。

Description

CVE-2020-8597 in RM2100

File Snapshot


 [4.0K]  /data/pocs/df5fa242378a0ab57d1a96839747c8c10d25ff11
├── [103K]  breed-mt7621-xiaomi-r3g.bin
├── [1.6M]  busybox
├── [676K]  libuClibc-0.9.33.2.so
├── [6.4M]  libuClibc-0.9.33.2.so.idb
├── [957K]  MIWIFIRepairTool.x86.zip
├── [ 16M]  miwifi_rm2100_firmware_d517e_1.0.14.bin
├── [3.3K]  PoC.py
├── [228K]  pppd
├── [2.4M]  pppd.idb
├── [7.6K]  PPPoE_Simulator.py
└── [9.7M]  RM2100_3.4.3.9-099.trx

0 directories, 11 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!