[Full-Disclosure] DCOM RPC exploit failed
From: Marcus Graf (m.graf_at_firmenwelt.de)
Date: 07/27/03
- Previous message: El Guille: "Re: [Full-Disclosure] DCOM RPC exploit (dcom.c)"
- Next in thread: Thiago Campos: "Re:[Full-Disclosure] DCOM RPC exploit failed"
- Maybe reply: Thiago Campos: "Re:[Full-Disclosure] DCOM RPC exploit failed"
- Reply: Knud Erik Højgaard: "Re: [Full-Disclosure] DCOM RPC exploit failed"
- Maybe reply: Richard Stevens: "RE: [Full-Disclosure] DCOM RPC exploit failed"
- Maybe reply: Ben Tyson-Norrman: "RE: [Full-Disclosure] DCOM RPC exploit failed"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: full-disclosure@lists.netsys.com Date: Sun, 27 Jul 2003 22:50:22 +0200
Just 4 info:
I compiled dcom.c on linux and tried it against a
Windows 2000 SP4, german version.
The exploit failed (maybe I need some offset adjustments for the
german version of Win2k) but after that I noticed some malfunctions:
- The windows explorer was not able to perform drag'n drop any more.
When I tried to drag a file somewehere nothing happened.
- The media player failed. The window came up and closed itself after
a few seconds.
... don't know what else failed...
So even when then exploit failed it may seriously disturb the windows
functionality. A massive scan for vulnerable windows systems on the
net may become the character of an DoS attack even without any
successful exploit.
Ciao
Marcus
-- Windows is not the answer. Windows is the question and the answer is no. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
- Previous message: El Guille: "Re: [Full-Disclosure] DCOM RPC exploit (dcom.c)"
- Next in thread: Thiago Campos: "Re:[Full-Disclosure] DCOM RPC exploit failed"
- Maybe reply: Thiago Campos: "Re:[Full-Disclosure] DCOM RPC exploit failed"
- Reply: Knud Erik Højgaard: "Re: [Full-Disclosure] DCOM RPC exploit failed"
- Maybe reply: Richard Stevens: "RE: [Full-Disclosure] DCOM RPC exploit failed"
- Maybe reply: Ben Tyson-Norrman: "RE: [Full-Disclosure] DCOM RPC exploit failed"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|