Microsoft Windows - 'RPC DCOM' Remote (Universal)

/ Windows remote RPC DCOM exploit Coded by oc192 Includes 2 universal targets, 1 for win2k, and 1 for winXP. This exploit uses ExitThread in its shellcode to prevent the RPC service from crashing upon successful exploitation. It also has several other options including definable bindshell and...

Microsoft Windows - RPC DCOM Remote (Universal)

Microsoft Windows - RPC DCOM Remote Universal / Windows remote RPC DCOM exploit Coded by oc192 Includes 2 universal targets, 1 for win2k, and 1 for winXP. This exploit uses ExitThread in its shellcode to prevent the RPC service from crashing upon successful exploitation. It also has several other...

Microsoft Windows - RPC DCOM Remote (1)

Microsoft Windows - RPC DCOM Remote 1 ////////////////////////////////////////////////////////////////////////////////////////////// // // Windows RPC DCOM Remote Exploit with 18 Targets // by pHrail and smurfy + some offsets by teos // // Targets: // 0 Win2k Polish nosp ver 5.00.2195 // 1 Win2k...

wp-02-0012: Carello 1.3 Remote File Execution (Updated 1/10/2002)

Westpoint Security Advisory Title: Carello 1.3 Remote File Execution Risk Rating: High Software: Carello Shopping Cart Platforms: Win2k, WinNT Vendor URL: www.carelloweb.com Author: Matt Moore [email protected] Date: 10th July 2002 Advisory ID: wp-02-0012 Revision: Updated 22/02/2002 see...

Winhelp32 Remote Buffer Overrun

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NGSSoftware Insight Security Research Advisory Name: Winhlp32.exe Remote BufferOverrun Systems Affected: Win2K Platform Severity: Critical Category: Remote Buffer Overrun Vendor URL: http://www.mircosoft.com Author: Mark Litchfield [email protected]...

Remotely Exploitable Buffer Overruns in Microsoft's Commerce Server 2000/2 (#NISRNISR03062002)

NGSSoftware Insight Security Research Advisory Name: Microsoft Commerce Server 2000 & Commerce Server 2002 Systems Affected: WinNT, Win2K, XP Severity: High Risk Category: Buffer Overrun & Command Execution Vendor URL: http://www.microsoft.com/ Authors: Mark Litchfield [email protected] & Davi...

Macromedia JRUN Buffer overflow vulnerability (#NISR29052002)

NGSSoftware Insight Security Research Advisory Name: Macromedia JRun 3.1 Systems Affected: IIS 4/5 on WinNT 4/Win2K Severity: High Risk Category: Remote System Buffer Overrun Vendor URL: http://www.macromedia.com Author: David Litchfield [email protected] Advisory URL:...

UDP DoS attack in Win2k via IKE

UDP DoS in Win2k via IKE PROBLEM ======= A DoS attack can be carried out on Win2k machines running IKE internet key exchange by sending flooding IKE with UDP packets. This can cause the machine to lock up and render 99 of the CPU. EXPLOIT ====== Connect to port 500 IKE of the Win2k box and start...

RESIN ServletExec JSP Source Disclosure Vulnerability(Apache 1.3.6 Win2k))

Resintm serves the fastest servlets and JSP. With Java and JavaScript support, Resin gives web applications the flexibility to choose the right language for the task. Resin's leading XSL XML stylesheet language support encourages separation of content from formatting. Resin provides a fast servle...

Проблемы с подмонтированными дисками и клиентами Mac в Win2K

Если том макинтош подмонтирован отдельным диском, то клиент макинтош будет иметь возможность записывать корневой каталог не зависимо от разрешений на сопряжение junction...

DoS против протокола SMB (Server) в WinNT/Win2K

Специально сконструированные SMB-Пакеты например с некорректной длинной пакета приводят к отказу службы сервера, а в некоторых случаях к полному отказу стека TCP/IP...