Re: The French BUGTRAQ

[Chris Paget <chrisp () ngssoftware com>]

This is indeed a reverse shell exploit.  It appears to be broken though, at
least when directed against my XP SP1 virtual machine.  It's also not portable;
you have to specify the target OS/service pack.  Certainly doesn't look like
it's far off though; I'd expect to see a lot of kiddies with working code fairly
soon, although it will crash the target if you guess the wrong service pack.

Hands up if you're patched.

Hands up if you know for certain that every machine in your organisation is
patched...

Chris



On Fri, 25 Jul 2003, D C wrote:

> I noticed there is a an exploit in the archive at http://www.K-otiK.com  titled "MS Windows RPC DCOM Interface Buffer 
> Overflow Exploit" (the file itself is 07.21.MS03-026.c).  I have not had a chance to review the code closely, yet... 
> is this an exploit based on the Windows RPC advisory released by The Last Stage of Delirium recently?
>
>
>
>
> ---------------------------------
> Do you Yahoo!?
> The New Yahoo! Search - Faster. Easier. Bingo.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html