CVE-2018-3295 PoC — Oracle Virtualization VM VirtualBox组件安全漏洞

Source

https://github.com/ndureiss/e1000_vulnerability_exploit

Associated Vulnerability

Title:Oracle Virtualization VM VirtualBox组件安全漏洞 (CVE-2018-3295)
Description:Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).

Description

Exploitation of VirtualBox vulnerability (https://nvd.nist.gov/vuln/detail/CVE-2018-3295)

Readme

# e1000_vulnerability_exploit

## Installation

> $ ./install.sh

Only own version build are supported yet. Please choose *own* and *debug* to build your debug version.

Warning : During the process an error can occur, especially during the sources compilation. You can have something like "Exit with error status 2."

Please contact us at nicolas.dureisseix@etu.enseeiht.fr if an error occurs.

## Debug

Use RTLogPrintf(string, args) to print debug message. The debug will go into .log files in VirtualBox folder.

Look into the files :

* src/VBox/Devices/Network/DevE1000 .cpp / .h ;

* src/VBox/Devices/Network/DevEEPROM .cpp / .h.

You can use `cleanlog` script to clean all logs and `printlog` to print them in the console.

## VM

There is not script for VM creation/management yet. Please create a VM called ProjetLong with 2CPU Cores and 8Gb RAM.

Download `fake_driver` folder into the VM and run `load_fake_driver`. Use `reload_fake_driver` if you have already load the driver and you want to apply changes.

## Note

Some scripts will arrive to make it easier for users, on VM and VMM.

File Snapshot


 [4.0K]  /data/pocs/b53a4d9ea8f7eb7b1a947e9798431554cd8bc297
├── [ 271]  cleanlog.sh
├── [2.1M]  DOC_E1000.pdf
├── [4.0K]  fake_driver
│   ├── [ 15K]  e1k.c
│   ├── [4.8K]  e1k_utils.h
│   ├── [ 277]  load_fake_driver.sh
│   ├── [ 544]  Makefile
│   └── [ 312]  restore_network.sh
├── [4.9K]  install.sh
├── [ 108]  printlog.sh
├── [1.1K]  README.md
└── [1.1K]  remake.sh

1 directory, 11 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!