Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2015-3036

Description

Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR products, TP-LINK products, and other products, allows remote attackers to execute arbitrary code by providing a long computer name in a session on TCP port 20005.

POC

Reference

- http://packetstormsecurity.com/files/131987/KCodes-NetUSB-Buffer-Overflow.html

- http://packetstormsecurity.com/files/133919/NetUSB-Stack-Buffer-Overflow.html

- http://seclists.org/fulldisclosure/2015/May/74

- http://www.kb.cert.org/vuls/id/177092

- https://www.exploit-db.com/exploits/38454/

- https://www.exploit-db.com/exploits/38566/

Github

- https://github.com/ARPSyndicate/cve-scores

- https://github.com/ARPSyndicate/cvemon

- https://github.com/Leproide/TD-W8970-NetUSB-Fix-v1-

- https://github.com/funsecurity/NetUSB-exploit

- https://github.com/odolezal/D-Link-DIR-655

- https://github.com/pandazheng/MiraiSecurity