cve/2008/CVE-2008-0122.md

20 lines
934 B
Markdown
Raw Normal View History

2024-05-26 14:27:05 +02:00
### [CVE-2008-0122](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0122)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.
### POC
#### Reference
- https://bugzilla.redhat.com/show_bug.cgi?id=429149
#### Github
- https://github.com/Heshamshaban001/Kioptix-level-1-walk-through
- https://github.com/Heshamshaban001/Metasploitable1-walkthrough
- https://github.com/Heshamshaban001/Metasploitable2-Walk-through