RE: [Full-Disclosure] EEYE: Microsoft RPC Heap Corruption Vulnerability - Part II

From: Chris DeVoney (cdevoney_at_u.washington.edu)
Date: 09/11/03

  • Next message: Jeff.Urnaza_at_averydennison.com: "RE: [Full-Disclosure] EEYE: Microsoft RPC Heap Corruption Vulnerability - Part II" 
    To: <Jeff.Urnaza@averydennison.com>, "'Full-Disclosure'" <full-disclosure@lists.netsys.com>
Date: Wed, 10 Sep 2003 15:36:10 -0700

    On Wednesday, September 10, 2003 1:26 PM, Jeff.Urnaza@averydennison.com
    wrote:

    > The version number in eEye's supposed *new* scanner is the
    > same version number as the one they release for the previous
    > RPC exploit, v1.0.4.

    Pardon my interuption, but the version I downloaded about noon-ish PDT has
    version 1.1.0 in both its Help-About and its file properties. It does report
    vulnerabilities to MS03-026 and -039.

    cdv

    ------------------------
    Chris DeVoney
    Clinical Research Center Informatics
    University of Washington
    cdevoney@u.washington.edu
    206-598-6816
    ------------------------

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Jeff.Urnaza_at_averydennison.com: "RE: [Full-Disclosure] EEYE: Microsoft RPC Heap Corruption Vulnerability - Part II"
    Loading