CVE-2018-1160
CRITICALnetatalk < 3.1.12 - Unauthenticated Out-of-bounds Write in dsi_opensess.c
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2018-1160. PoCs published by muts, Jacob Baines, Tenable NS.
AI-analyzed exploit summary This exploit leverages an authentication bypass vulnerability in QNAP Netatalk by overwriting the preauth_switch pointer, allowing unauthorized access to AFP services. It includes functions to list volumes, read/write files, and execute arbitrary commands.
Description
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution.
Exploits (4)
This exploit leverages an authentication bypass vulnerability in QNAP Netatalk by overwriting the preauth_switch pointer, allowing unauthorized access to AFP services. It includes functions to list volumes, read/write files, and execute arbitrary commands.
This exploit demonstrates an authentication bypass vulnerability in Netatalk by overwriting the preauth_switch pointer, allowing unauthorized access to AFP services. It includes functions to list volumes, read/write files, and execute arbitrary commands on affected systems.
This exploit targets a buffer overflow in the AFP protocol implementation (CVE-2018-1160) by crafting malicious DSI and AFP packets to overwrite memory addresses and redirect execution flow. It sends a structured payload to trigger the vulnerability and achieve remote code execution.
References (11)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H