CVE-2021-44142 PoC — Samba 缓冲区错误漏洞

Source

https://github.com/WinDyAlphA/CVE-2021-44142-vulnerable-lab

Associated Vulnerability

Title:Samba 缓冲区错误漏洞 (CVE-2021-44142)
Description:The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.

Description

CVE-2021-44142 vulnerable lab

Readme

# CVE-2021-44142-vulnerable-lab

File Snapshot


 [4.0K]  /data/pocs/b474029491080ad7180b22d50f37196e81947372
├── [ 480]  docker-compose.yml
├── [3.8K]  Dockerfile
├── [3.6K]  entrypoint.sh
├── [  32]  README.md
└── [ 606]  smb.conf

1 directory, 5 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!