full-disclosure - MS RPC remote exploit.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: trey.mujakporue at uk.tesco.com (Trey Mujakporue/UK/Tesco)
Subject: MS RPC remote exploit.

>From my cursory look at the code,(/me is a C rookie) it seems that it
only affects w2k and winXP, does anyone know of any exploit that targets
NT4???
Given that question, how hard would it be to code in NT4 functionality??

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Peter Kruse
Sent: 09 October 2003 14:27
To: 'Sudharsha Wijesinghe'; full-disclosure@...ts.netsys.com
Subject: SV: [Full-Disclosure] MS RPC remote exploit.


Hi,

Systems already updated are not vulnerable to this exploit. The new code
is simply improved and is now more "universal". It doesn?t make use of
static addresses for jumps which makes the improved code much more
dangerous since it will be effective on a large range of different
vulnerable Microsoft Windows operativ systems.

Kind regards // Med venlig hilsen

Peter Kruse
CSIS / Kruse Security ApS

http://www.krusesecurity.dk - www.csis.dk

> -----Oprindelig meddelelse-----
> Fra: full-disclosure-admin@...ts.netsys.com
> [mailto:full-disclosure-admin@...ts.netsys.com] P? vegne af 
> Sudharsha Wijesinghe
> Sendt: 9. oktober 2003 14:42
> Til: full-disclosure@...ts.netsys.com
> Emne: [Full-Disclosure] MS RPC remote exploit.
> 
> 
> According to MS there cant be any Remote exploit on MS RPC
> except for a DOS attack using 139/135/445. How ever the code 
> is available for a shell code. has any one tried this exploit?
> 
> Sudharsha
> 
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
> 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


-------------------Warning------------------------

This e-mail is from outside Tesco - check that it is genuine. Tesco may
monitor and record all e-mails.



---- Disclaimer ----
This is a confidential email.  Tesco may monitor and record all emails.  The views expressed in this email are those of the sender and not Tesco.  
Tesco Stores Limited, Tesco House, Delamare Road, Cheshunt, Herts, EN8 9SL: company number 519500.