Immunity Canvas: MS05_021

2005-05-0204:00:00

Immunity Canvas

exploitlist.immunityinc.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.719 High

EPSS

Percentile

97.7%

Name	ms05_021
CVE	CVE-2005-0560 Exploit Pack
VENDOR: Microsoft
MSADV: MS05-021
CVSS: 7.5
CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0560
Notes: This exploit is reliable over and over again (assuming you have the language correct), but give Inetinfo a little while to
boot up after you crash it. This is a callback exploit, so obviously you’ll need to have the correct interface selected to callback, otherwise LSASS might crash.