Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Full Disclosure: RE: DCOM Exploit MS03-026 attack vectors

RE: DCOM Exploit MS03-026 attack vectors

From: Bassett, Mark <mbassett_at_omaha.com>
Date: Fri, 1 Aug 2003 09:04:00 -0500

>Well, it is the most widely supported default interface that is
>vulnerable. It would be a very unusual machine that is vulnerable on
>some other port and _NOT_ on 135, so what is the payoff for writing an
>exploit (at least a "prrof of concept") that tries other ports?

Because 9 times out of 10 port 135 is blocked by some sort of firewall,
whilst port 80 is not blocked on a web server.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Received on Aug 01 2003

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos