Skip to content

Latest commit

 

History

History
 
 

CVE-2008-1721

README.md

CVE-2008-1721

Experiment Environment

Ubuntu 10.04 LTS

INSTALL & Configuration

wget https://github.com/mudongliang/source-packages/raw/master/CVE-2008-1721/Python-2.5.1.tar.bz2
tar -xvf Python-2.5.1.tar.bz2
cd Python-2.5.1
./configure
make

Problems in Installation & Configuration

How to trigger vulnerability

./python python-2.5.2-zlib-unflush-misallocation.py
./python python-2.5.2-zlib-unflush-signedness.py

PoCs

Python Bug 2586

Python zlib Module Remote Buffer Overflow Vulnerability

Python zlib Module - Remote Buffer Overflow

Vulnerability Details & Patch

Root Cause

https://www.securityfocus.com/archive/1/archive/1/490690/100/0/threaded

Stack Trace

Patch

References