Files
CVEs-PoC/2008/CVE-2008-0122.md
T
2024-06-18 02:51:15 +02:00

20 lines
934 B
Markdown

### [CVE-2008-0122](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0122)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.
### POC
#### Reference
- https://bugzilla.redhat.com/show_bug.cgi?id=429149
#### Github
- https://github.com/Heshamshaban001/Kioptix-level-1-walk-through
- https://github.com/Heshamshaban001/Metasploitable1-walkthrough
- https://github.com/Heshamshaban001/Metasploitable2-Walk-through