full-disclosure - The French BUGTRAQ

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.WNT.4.51.0307251021130.1376@lara.gremlinhunters.co.uk>
From: chrisp at ngssoftware.com (Chris Paget)
Subject: The French BUGTRAQ

This is indeed a reverse shell exploit.  It appears to be broken though, at
least when directed against my XP SP1 virtual machine.  It's also not portable;
you have to specify the target OS/service pack.  Certainly doesn't look like
it's far off though; I'd expect to see a lot of kiddies with working code fairly
soon, although it will crash the target if you guess the wrong service pack.

Hands up if you're patched.

Hands up if you know for certain that every machine in your organisation is
patched...

Chris

On Fri, 25 Jul 2003, D C wrote:

>
> I noticed there is a an exploit in the archive at http://www.K-otiK.com  titled "MS Windows RPC DCOM Interface Buffer Overflow Exploit" (the file itself is 07.21.MS03-026.c).  I have not had a chance to review the code closely, yet... is this an exploit based on the Windows RPC advisory released by The Last Stage of Delirium recently?
>
>
>
>
> ---------------------------------
> Do you Yahoo!?
> The New Yahoo! Search - Faster. Easier. Bingo.