full-disclosure - Local persistent DoS in Windows XP SP2 Taskmanager

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <E908D49E-BACD-4E57-875C-BC0D9254E2F0@gmx.net>
Date: Fri, 14 Mar 2008 20:49:31 +0100
From: SkyOut <skyout@....net>
To: full-disclosure@...ts.grok.org.uk
Subject: Local persistent DoS in Windows XP SP2 Taskmanager

Dear list,

after weeks of total ignorance by Microsoft I decided to finally  
release all information
related to a bug, that has to do with the Windows XP SP2 Taskmanager.  
Manipulating
a Registry key makes it possible to disable the Taskmgr. On the next  
startup it will crash with
an error message. It is possible to backup the key and repair the  
Registry doing so, but
the attack scenario is clear: A virus uses this code, the user can't  
open the Taskmgr anymore
and your process is somehow "hidden".

The full information about this bug, can be found here:
http://core-security.net/archive/2008/march/index.php#14032008

And the exploit is available here:
http://core-security.net/releases/exploits/taskmgr_dos.c.txt

Greets,
SkyOut

---
core-security.net
---
Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/