CVEs-PoC/2010/CVE-2010-4756.md

CVE-2010-4756

Description

The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.

POC

Reference

• http://securityreason.com/achievement_securityalert/89
• http://securityreason.com/exploitalert/9223

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/DanMolz/wiz-scripts
• https://github.com/GrigGM/05-virt-04-docker-hw
• https://github.com/PajakAlexandre/wik-dps-tp02
• https://github.com/cdupuis/image-api
• https://github.com/flyrev/security-scan-ci-presentation
• https://github.com/fokypoky/places-list
• https://github.com/garethr/snykout
• https://github.com/gatecheckdev/gatecheck
• https://github.com/jasona7/ChatCVE
• https://github.com/mauraneh/WIK-DPS-TP02
• https://github.com/puerco/vexi