Microsoft Windows ndproxy.sys - Local Privilege Escalation

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 Msf::Exploit::Local Rank = AverageRanking include Msf::Post::File include...

Windows NDPROXY - 本地权限提升漏洞(MS14-002)

漏洞成因 这是一个windows内核漏洞，漏洞的触发需要开启Routing and Remote Access服务，影响 windowsxp，windows2003. 先上 poc c include include int main HANDLE hDev = CreateFile"\\.\NDProxy", GENERICREAD | GENERICWRITE, FILESHAREREAD | FILESHAREWRITE, NULL, OPENEXISTING , 0, NULL; ifhDev==INVALIDHANDLEVALUE printf"CreateFile...

Microsoft Windows ndproxy.sys Local Privilege Escalation

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'Microsoft Windows ndproxy.sys Local Privilege Escalation', 'Description' = %q This module exploits a flaw in the...

MS14-002 Microsoft Windows ndproxy.sys Local Privilege Escalation

This module exploits a flaw in the ndproxy.sys driver on Windows XP SP3 and Windows 2003 SP2 systems, exploited in the wild in November, 2013. The vulnerability exists while processing an IO Control Code 0x8fff23c8 or 0x8fff23cc, where user provided input is used to access an array unsafely, and...

Buffer overflow

Buffer overflow in the Routing and Remote Access NDProxy component in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, related to the Routing and Remote Access service RRAS and improper copying from user mode to th...

CVE-2010-3963

CVE-2010-3963 affects the Windows kernel’s Routing and Remote Access NDProxy driver, notably on Windows XP (SP2/SP3) and Server 2003 SP2. The vulnerability originates from improper validation/copying of data from user mode into the kernel, enabling a local attacker to trigger a kernel-mode privil...

CVE-2010-3963

Buffer overflow in the Routing and Remote Access NDProxy component in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, related to the Routing and Remote Access service RRAS and improper copying from user mode to th...

Routing and Remote Access Privilege Escalation Vulnerability (2440591)

This host is missing an important security update according to Microsoft Bulletin MS10-099. OpenVAS Vulnerability Test $Id: secpodms10-099.nasl 5361 2017-02-20 11:57:13Z cfi $ Routing and Remote Access Privilege Escalation Vulnerability 2440591 Authors: Veerendra GG Copyright: Copyright c 2010...

MS10-099: Vulnerability in Routing and Remote Access Could Allow Elevation of Privilege (2440591)

The Routing and Remote Access NDProxy component of the remote Windows host does not properly validate user-supplied input when passing data from user mode to the kernel. An attacker who can log on locally to the affected system can exploit this to run arbitrary code in kernel mode. C Tenable...

Microsoft RRAS Service - Remote Overflow (MS06-025) (Metasploit)

$Id: ms06025rras.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

PPPOE authentication the defect caused the harm-vulnerability warning-the black bar safety net

Author: black lantern Black Mask） Source: Black Mask'blog The article has a table in the hacker X-Files 2 0 0 7 in the first period,reproduced please specify! With the network technology rapid development, the different access methods and thus also into our lives at the time, from the most common...

Windows RASMAN registry corruption vulnerability

Added: 07/28/2006 CVE: CVE-2006-2371 BID: 18358 OSVDB: 26436 Background The Routing and Remote Access Service RRAS allows a Windows computer to act as a router, dial-up access server, VPN server, or network address translator. The Remote Access Connection Manager RASMAN service handles the detail...

rasman.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Microsoft Windows RRAS - Remote Stack Overflow (MS06-025) (Metasploit)

Microsoft Windows RRAS - Remote Stack Overflow MS06-025 Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

MS Windows RRAS Remote Stack Overflow Exploit (MS06-025)

Exploit for unknown platform in category remote exploits ======================================================== MS Windows RRAS Remote Stack Overflow Exploit MS06-025 ======================================================== This file is part of the Metasploit Framework and may be redistributed...

MS06-025 Microsoft RRAS Service RASMAN Registry Overflow

This module exploits a registry-based stack buffer overflow in the Windows Routing and Remote Access Service. Since the service is hosted inside svchost.exe, a failed exploit attempt can cause other system services to fail as well. A valid username and password is required to exploit this flaw on...

MS06-025: Vulnerability in Routing and Remote Access Could Allow Remote Code Execution (911280)

The remote version of Windows contains a version of RRAS Routing and Remote Access Service that has several memory corruption vulnerabilities. An attacker may exploit these flaws to execute code on the remote service. C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2002-0366

Buffer overflow in Remote Access Service RAS phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server RRAS allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry...

Security Update for Windows 2000 (KB911280)

A remote code execution security issue has been identified in the Routing and Remote Access service that could allow an attacker to remotely compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you instal...

Security Update for Windows XP x64 Edition (KB911280)

A remote code execution security issue has been identified in the Routing and Remote Access service that could allow an attacker to remotely compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you instal...