Re: ms04-031 pre-auth ??

[Matt Hargett <matt () use net>]

Sinan Eren wrote:
> http://www.microsoft.com/technet/security/bulletin/ms04-031.mspx
>
> We have located the vulnerable function and just recently wrote the 
> CANVAS module for it but all our tests showed that the NetDDE 
> vulnerability can not be exploited with a NULL session a.k.a 
> with "Anonymous Logon" credentials.

Can you share the function name/location, perchance? :) I'm curious what 
the bug looks like.
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://www.immunitysec.com/mailman/listinfo/dailydave