rapid7 / meterpreter

THIS REPO IS OBSOLETE. USE https://github.com/rapid7/metasploit-payloads INSTEAD
Other
326 stars 144 forks source link

gethostbyname Vulnerability? #118

Closed Meatballs1 closed 9 years ago

Meatballs1 commented 9 years ago

http://www.openwall.com/lists/oss-security/2015/01/27/9

I don't think meterpreter is vulnerable as we use bionic?

bcook-r7 commented 9 years ago

It's a 2 year old copy of bionic, and only on posix, but yeah, bionic cribs from various BSD sources.

In this case, it appears to be using netbsd's resolver.

bcook-r7 commented 9 years ago

Thanks for checking in though!