bugtraq - [VulnDiscuss] RE: New attack vectors and a vulnerability dissection of MS03-007

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <75DA357EA3B59943A127FCB9D1F3BAD96386@EXCHANGE.ornl.gov>
Date: Fri, 21 Mar 2003 13:50:02 -0500
From: "Depp, Dennis M." <deppdm@...l.gov>
To: David Litchfield <david@...software.com>, ntbugtraq@...tserv.ntbugtraq.com,
 vulnwatch@...nwatch.org, bugtraq@...urityfocus.com
Subject: [VulnDiscuss] RE: New attack vectors and a vulnerability dissection of MS03-007

David,
 
Have you found any attack vectors that do not require IIS?
 
Thanks
 
Dennis

	-----Original Message----- 
	From: David Litchfield [mailto:david@...software.com] 
	Sent: Fri 3/21/2003 11:16 AM 
	To: ntbugtraq@...tserv.ntbugtraq.com; vulnwatch@...nwatch.org; bugtraq@...urityfocus.com 
	Cc: 
	Subject: New attack vectors and a vulnerability dissection of MS03-007
	
	

	The patch announced by Microsoft on the 17th March 2003 fixed a security
	vulnerability in the core of the Windows 2000 operating system. This flaw
	was actively being exploited through WebDAV requests to Microsoft's Internet
	Information Server 5. It must be stressed that IIS was simply the attack
	vector; the method or route used to actually exploit the flaw. The problem,
	however, is much wider in scope than just simply machines running IIS.
	Researchers at NGSSoftware have isolated many more attack vectors including
	java based web servers and other non-WebDAV related issues in IIS. Due to
	this, NGSSoftware urge Windows 2000 users to apply the patch.
	
	For a paper that examines the vulnerability in detail, please read
	http://www.ngssoftware.com/papers/ms03-007-ntdll.pdf .
	
	Cheers,
	David Litchfield
	NGSSoftware Ltd
	+44(0)208 401 0070
	http://www.ngssoftware.com/