CVE-2013-1428
tinc < 1.0.21 and 1.1 < 1.1pre7 - Authenticated Stack-Based Buffer Overflow via Large TCP Packet
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2013-1428.
PoCs published by Metasploit, Tobias Ospelt, Martin Schobert, including Metasploit module exploits/multi/vpn/tincd_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Tinc's tincd service (CVE-2013-1428) to achieve remote code execution. It supports multiple platforms and includes ROP-based exploitation for systems with NX/ASLR protections.
Description
Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large TCP packet.
Exploits (2)
This Metasploit module exploits a stack buffer overflow in Tinc's tincd service (CVE-2013-1428) to achieve remote code execution. It supports multiple platforms and includes ROP-based exploitation for systems with NX/ASLR protections.
This Metasploit module exploits a stack buffer overflow in Tinc's tincd service (CVE-2013-1428) via a crafted TCP packet post-authentication, allowing arbitrary code execution. It includes ROP chains for various platforms and handles ASLR brute-forcing for ARM targets.