Multiple heap memory corruption vulnerabilities in the MikroTik RouterOS 'sshd' component

Release date: 2013-09-02
Updated on:

Affected Systems:
MikroTik RouterOS
Description:
--------------------------------------------------------------------------------
Bugtraq id: 62110

MikroTik RouterOS is a routing operating system developed based on the Linux core and compatible with x86 PCs. It turns a common PC into a high-performance router and has been transplanted to the MikroTik RouterBOARD hardware platform for running.

The sshd component of the MikroTik RouterOS has the remote heap corruption vulnerability, which allows you to obtain full access permissions of the router device.

<* Source: Kingdom (kingcope@gmx.net)

Link: http://kingcope.wordpress.com/2013/09/02/mikrotik-routeros-5-and-6-sshd-remote-preauth-heap-corruption/
*>

Test method:
--------------------------------------------------------------------------------

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!

Ssh-l 'perl-e & acirc ;?? Print & acirc ;?? A & acirc ;? & #157; x 100000 & #39; '& amp; lt; ip of mikrotik router & amp; gt;

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

MikroTik
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.mikrotik.com/download