CVE-2019-15846 PoC — Exim 缓冲区错误漏洞

Source

https://github.com/synacktiv/Exim-CVE-2019-15846

Associated Vulnerability

Title:Exim 缓冲区错误漏洞 (CVE-2019-15846)
Description:Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash.

Description

PoC materials to exploit CVE-2019-15846

Readme

Exim CVE-2019-15846
===================

PoC materials to exploit CVE-2019-15846. Blogpost explaining the PoC is
available on
[Synacktiv Blog](https://www.synacktiv.com/posts/exploit/scraps-of-notes-on-exploiting-exim-vulnerabilities.html).

This PoC help generate spool files used exploit a heap overflow in exim.

Two example spool files are given in [1i7Jgy-0002dD-Pb-D](1i7Jgy-0002dD-Pb-D)
and [1i7Jgy-0002dD-Pb-H](1i7Jgy-0002dD-Pb-H).

A specialy crafted spool header file can be generated with
[exgen.py](exgen.py).

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!