Skip to content

Instantly share code, notes, and snippets.

@wellic
Forked from koelling/gist:ef9b2b9d0be6d6dbab63
Last active August 29, 2015 14:14
Show Gist options
  • Save wellic/d6dfcdefa2aa6dccc900 to your computer and use it in GitHub Desktop.
Save wellic/d6dfcdefa2aa6dccc900 to your computer and use it in GitHub Desktop.
#include <netdb.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <errno.h>
#define CANARY "in_the_coal_mine"
struct {
char buffer[1024];
char canary[sizeof(CANARY)];
} temp = { "buffer", CANARY };
int main(void) {
struct hostent resbuf;
struct hostent *result;
int herrno;
int retval;
/*** strlen (name) = size_needed - sizeof (*host_addr) - sizeof (*h_addr_ptrs) - 1; ***/
size_t len = sizeof(temp.buffer) - 16*sizeof(unsigned char) - 2*sizeof(char *) - 1;
char name[sizeof(temp.buffer)];
memset(name, '0', len);
name[len] = '\0';
retval = gethostbyname_r(name, &resbuf, temp.buffer, sizeof(temp.buffer), &result, &herrno);
if (strcmp(temp.canary, CANARY) != 0) {
puts("vulnerable");
exit(EXIT_SUCCESS);
}
if (retval == ERANGE) {
puts("not vulnerable");
exit(EXIT_SUCCESS);
}
puts("should not happen");
exit(EXIT_FAILURE);
}
/* from http://www.openwall.com/lists/oss-security/2015/01/27/9 */
@wellic
Copy link
Author

wellic commented Jan 29, 2015

Лечение уязвимости GHOST:
http://habrahabr.ru/company/pt/blog/249097/
http://habrahabr.ru/company/infobox/blog/249083/
http://www.cyberciti.biz/faq/cve-2015-0235-patch-ghost-on-debian-ubuntu-fedora-centos-rhel-linux/

Проверка:
wget https://gist.github.com/wellic/d6dfcdefa2aa6dccc900/raw/de1730049198c64eaf8f8ab015a3c8b23b63fd34/gistfile1.c
gcc gistfile1.c -o CVE-2015-0235
./CVE-2015-0235
После проверки
rm gistfile1.c CVE-2015-0235

Лечение на убунте под рутом:
apt-key update
apt-get clean
apt-get update
apt-get upgrade

или на centos

sudo yum clean all
sudo yum update

После всего перегурузится.
sudo reboot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment