[prev in list] [next in list] [prev in thread] [next in thread]
List: full-disclosure
Subject: [FD] =?windows-1252?q?Symantec_Endpoint_Protection_=96_Remote_Buf?= =?windows-1252?q?fer_Overflow_Po
From: <jerome () wallaby ! be>
Date: 2014-04-26 10:14:40
Message-ID: 535B8710.2040305 () wallaby ! be
[Download RAW message or body]
Hello,
Here is a PoC of the CVE-2013-1612 bug, targeting SEP Manager version
12.1.0 -> 12.1.2.
It's a simple SEH-based code which set EIP to 0xcccccccc.
I've tried to write a stable exploit code but so far, it is still
unreliable. I meant that it works great in my labs, but will not work on
yours. Everything is explained here if you want to give a try..
http://funoverip.net/2014/04/symantec-endpoint-protection-manager-cve-2013-1612-remote-buffer-overflow-poc/
Bug references:
-
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20130618_00
- http://www.securityfocus.com/bid/60542/info
- https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-1612
Regards,
Jérôme Nokin
http://funoverip.net/
_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic