关联漏洞
标题：
GNU glibc 基于堆的缓冲区错误漏洞
(CVE-2015-0235)
描述：GNU glibc（又名GNU C Library，libc6）是一种按照LGPL许可协议发布的开源免费的C语言编译程序。 GNU glibc 2.2版本和2.18之前2.x版本中的‘__nss_hostname_digits_dots’函数存在基于堆的缓冲区溢出漏洞。本地和远程攻击者都可通过调用‘ gethostbyname*()’函数利用该漏洞以运行应用程序的用户权限执行任意代码，控制系统。
描述
Ansible playbook to check vulnerability for CVE-2015-0235
介绍
# CVE-2015-0235-test
Ansible playbook to **check vulnerability** for [CVE-2015-0235](http://www.openwall.com/lists/oss-security/2015/01/27/9). This is based on the test program provided by the University of Chigago ([link](https://itservices.uchicago.edu/page/ghost-vulnerability)). Ansible will allow you to specify a large number of host machines to test at once.
**This does not patch or restart anything**, it only reports if your systems are affected.
Assumes `gcc` is installed remotely.
# Note!
Please don't just arbitrarily run this on your hosts, read the code first to see what it does :)
## Usage
Requires ansible. Change the `user: your_remote_user` in `ghost.yml:2` to match your remote system(s).
```
pip install ansible
ansible-playbook -i hosts_to_test ghost.yml
```
## Sample output
```
af:ghost aaronfay$ ansible-playbook ghost.yml -i aaron_host
PLAY [all] ********************************************************************
GATHERING FACTS ***************************************************************
ok: [foobar.com]
TASK: [copy the GHOST script to the machine] **********************************
ok: [foobar.com]
TASK: [compile it] ************************************************************
ok: [foobar.com]
TASK: [run it!] ***************************************************************
ok: [foobar.com]
TASK: [show me the results] ***************************************************
ok: [foobar.com] => {
"ghost.stdout_lines[0]": "vulnerable"
}
PLAY RECAP ********************************************************************
foobar.com : ok=5 changed=0 unreachable=0 failed=0
```
文件快照
[4.0K] /data/pocs/9cfa24031085799ffd7eedd1d92e38d8981094b6
├── [1.0K] GHOST.c
├── [ 614] ghost.yml
├── [ 59] hosts_to_test
└── [1.6K] README.md
0 directories, 4 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。