bugtraq - s0h: Remote/Local exploit and patch for regedit.exe.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Mon, 28 Apr 2003 14:10:21 +0000
From: descript <descript@...8.s0h.cc>
To: bugtraq@...urityfocus.com;, vuln-dev@...urityfocus.com
Subject: s0h: Remote/Local exploit and patch for regedit.exe.

Hi,

The april 17, 2002, an strange exploit about a new vulnerability of regedit.exe was posted on the NTBugtraq list (http://sv98.s0h.cc/~threat/source/TrapReg.c).

This exploit can trapped an local key, that allow users to browse our register localy or _remotely_.

Today, the Monday 28 April 2003, ThreaT <ThreaT@....cc> from the Skin Of Humanity released the patch related to the exploit. This patch was released BEFORE Microsoft Corporation(c)(r)(tm).

Please enjoy the source code at http://www.s0h.cc/~threat/goodies/regpatch/source_regpatch.zip
Executable patch : http://www.s0h.cc/~threat/goodies/regpatch/regpatch.exe
Article (french, will be translated in few hours) : http://sv98.s0h.cc/~threat/goodies/regpatch/

Actualy this patch was tested on Windows SERVER/PRO 2000 SP2 and SP3 and regedit.exe version 5.0.2134.1 we don't sure that it's work for English version...

Please note : 
	The Skin Of Humanity Group protect all its members.if a problem occurs concerning this diffusion, the author is not responsible, the leader of the group is in all the responsible case of cause. Since the diffusion does not come from the creator but from the group. Thank you. 

Best regards and respect, 
Descript. <descript@....cc>
Skin Of Humanity
http://s0h.cc/