CVE-2018-1160 – Netatalk 3.1.12 - Authentication Bypass (PoC)

https://notcve.org/view.php?id=CVE-2018-1160

20 Dec 2018 — Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution. Netatalk, en versiones anteriores a la 3.1.12, es vulnerable a una escritura fuera de límites en dsi_opensess.c. Esto se debe a la falta de comprobación de límites de los datos controlados por el atacante. • https://packetstorm.news/files/id/150891 • CWE-787: Out-of-bounds Write •