|
Packit |
14c646 |
#!/usr/bin/perl
|
|
Packit |
14c646 |
|
|
Packit |
14c646 |
use strict;
|
|
Packit |
14c646 |
use warnings;
|
|
Packit |
14c646 |
use Test::More;
|
|
Packit |
14c646 |
use Storable qw(freeze thaw);
|
|
Packit |
14c646 |
plan tests => 1;
|
|
Packit |
14c646 |
|
|
Packit |
14c646 |
# this original worked with the packaged exploit, but that
|
|
Packit |
14c646 |
# triggers virus scanners, so test for the behaviour instead
|
|
Packit |
14c646 |
my $x = bless \(my $y = "mt-config.cgi"), "CGITempFile";
|
|
Packit |
14c646 |
|
|
Packit |
14c646 |
my $frozen = freeze($x);
|
|
Packit |
14c646 |
|
|
Packit |
14c646 |
{
|
|
Packit |
14c646 |
my $warnings = '';
|
|
Packit |
14c646 |
local $SIG{__WARN__} = sub { $warnings .= "@_" };
|
|
Packit |
14c646 |
thaw($frozen);
|
|
Packit |
14c646 |
like($warnings, qr/SECURITY: Movable-Type CVE-2015-1592 Storable metasploit attack/,
|
|
Packit |
14c646 |
'Detect CVE-2015-1592');
|
|
Packit |
14c646 |
}
|