CVE-2019-17424
HIGHnipper-ng 0.11.10 - Remote Code Execution or Denial of Service via Crafted Firewall Configuration File
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2019-17424. PoCs published by Guy Levin, mavlevin.
AI-analyzed exploit summary This exploit leverages a buffer overflow in nipper-ng 0.11.10 to achieve remote code execution by overwriting return addresses and injecting a shell command into a controlled memory location. The payload is crafted to bypass space restrictions and align memory addresses for reliable exploitation.
Description
A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Execution or Denial Of Service via a crafted file.
Exploits (3)
This exploit leverages a buffer overflow in nipper-ng 0.11.10 to achieve remote code execution by overwriting return addresses and injecting a shell command into a controlled memory location. The payload is crafted to bypass space restrictions and align memory addresses for reliable exploitation.
This repository contains a functional exploit for CVE-2019-17424, a stack-based buffer overflow in nipper-ng 0.11.10. The exploit generates a malicious input file that triggers arbitrary command execution by overwriting the return address and redirecting execution to a system() call with attacker-controlled arguments.
This repository contains a functional exploit for CVE-2019-17424, a stack-based buffer overflow in nipper-ng 0.11.10. The exploit generates a malicious input file that triggers arbitrary command execution by overwriting the return address and redirecting execution to a system() call with attacker-controlled arguments.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H