Re: DebPloit (exploit)

From: Tomasz Polus (tpolus@FAQ.NET.PL)
Date: 04/02/02


Date:         Tue, 2 Apr 2002 09:50:44 +0200
From: Tomasz Polus <tpolus@FAQ.NET.PL>
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM


> -----Original Message-----
> From: Windows NTBugtraq Mailing List
> [mailto:NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM] On Behalf Of Kurt Seifried
> Sent: Tuesday, April 02, 2002 4:43 AM
> To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
> Subject: Re: DebPloit (exploit)
>
>
> This is pretty old news (sent an alert on it March 19, and
> even back then it
> wasn't new), exploit works, the fix appears to work (or at
> least, it breaks
> that exploit, a start I suppose =). Hopefully MS will issue a
> fix. Some good
> info at (also some mis-info, but corrected in later posts):
>
>
http://www.ntsecurity.net/forums/Thread.cfm?CFApp=64&Thread_ID=99115&mc=
7
> http://disc.server.com/discussion.cgi?id=148775&article=277
> http://www.anticracking.sk/EliCZ/bugs/DebPloit.zip

Please see also:
http://cert.uni-stuttgart.de/people/fw/tools/chsystem/
It works for me.

-- 
Tomasz Polus