CVE-2012-4409

mcrypt versions 258 and below stack based overflow exploit Bypasses NX and ASLR protections ...

#!/usr/bin/env python # mcrypt <= 268 stack-based buffer overflow poc # mcryptsourceforgenet/ # (the command line tool, not the library) # # date: 2012-09-04 # exploit author: _ishikawa # tested on: ubuntu 12041 # tech: it overflows in check_file_head() when decrypting nc files with too long salt data # # shout-outs to all cryptop ...

#!/usr/bin/perl # Title : mcrypt <= 258 STACK based overflow # Date : 23/11/2012 # Exploit Author : Tosh # CVE : CVE-2012-4409 # Patch : wwwopenwallcom/lists/oss-security/2012/09/06/8 # Tested on : Archlinux 366-1, without SSP # This script exploit a stack based overflow in mcrypt < ...