Comments (2)
@Fans0n-Fan thanks for your comment.
In 32 bits Linux, especially on old kernels in non-x86 architectures, the entropy of the ASLR is very low. Typically there are only 12 bits of entropy:
PoC/advisories/dlink-hnap-login.txt
Line 156 in d374e22
But actually on this target ASLR is on and it does work properly!
Here something weird is going on.. the daemon (sslvpn
) spawns multiple threads, and one of the threads always has the stack at the same location. But the stack of the other threads, and all other libraries are, heap, etc, are all properly randomised ("properly" - bearing in mind the low entropy I mentioned above).
No idea why this is the case, I have never seen this behaviour before.
from poc.
We've just updated the advisory with a bit more knowledge about the bug, as we studied it a bit further. We still don't know why such light randomisation is used, but we know more or less what is happening. Please re-read that part! Closing this for now.
from poc.
Related Issues (8)
- lcms1.19 PoC HOT 2
- Great research, just wanted to say I liked it. HOT 3
- You can check the list of all vulnerabilities and Metasploit modules I publicly disclosed here. HOT 1
- Could I share your video on Youtube? HOT 7
- Could I share your on Youtube? HOT 2
- ISEpwn.rb connection failed HOT 6
- ISEpwn have a problem HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from poc.