| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <CABJ3UQfdAhWk6W7YwcYDmLu13SiS0UTM8wnyVE=WoPZXG_dwxw@mail.gmail.com>
Date: Mon, 18 May 2015 17:58:37 +0200
From: Gabriele Avosani <g.avosani@...il.com>
To: fulldisclosure@...lists.org
Subject: [FD] [Samba 3.0.37] EnumPrinters memory corruption
Hello, i discovered a bug in EnumPrinters.
It seems that it allocates many mega of memory, corrupting memory and
taking control of a memcpy in parse_prs.c:398
It leads to memory corruption, fatal (and fast) exhaustion of resources
and, probably, remote code execution.
I attach a file that can be used as a proof of concept.
Gabriele Avosani
(looking for remote work as programmer, if in need, email me at
g.avosani@...il.com (PHP, Perl, C/C++, Java and more))
Download attachment "enumprinters.tgz" of type "application/x-gzip" (15215 bytes)
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/
Powered by blists - more mailing lists