关联漏洞
标题：
Rsync 安全漏洞
(CVE-2024-12084)
描述：Rsync是RsyncProject开源的一款快速且用途广泛的文件复制工具。用于远程文件和本地文件。 Rsync 3.4之前版本存在安全漏洞，该漏洞源于存在基于堆的缓冲区溢出，攻击者可以在sum2缓冲区中写入越界内容。
描述
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
介绍
# CVE-2024-12084
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
## How does this detection method work?
This template matches on rsync protocol version 31 which has a high liklihood of being vulnerable to CVE-2024-12084. We can determine this by mapping protocols to versiosn when it comes to rsync.
```
vulnerable: <= 3.2.7 - protocol 31
unaffected: < 3.4.0 - protocol 32
```
## How do I run this script?
1. Download Nuclei from [here](https://github.com/projectdiscovery/nuclei)
2. Copy the template to your local system
3. Run the following command: `nuclei -u https://yourHost.com -t template.yaml`
## References
- https://nvd.nist.gov/vuln/detail/cve-2024-12084
- https://www.openwall.com/lists/oss-security/2025/01/14/6
## Disclaimer
Use at your own risk, I will not be responsible for illegal activities you conduct on infrastructure you do not own or have permission to scan.
## Contact
Feel free to reach out to me on [Signal](https://signal.me/#eu/0Qd68U1ivXNdWCF4hf70UYFo7tB0w-GQqFpYcyV6-yr4exn2SclB6bFeP7wTAxQw).
文件快照
[4.0K] /data/pocs/12f0a6430aec7ee649c774c22a106e2bb17716a0
├── [1.2K] README.md
└── [ 661] template.yaml
0 directories, 2 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。