[VulnWatch] New attack vectors and a vulnerability dissection of MS03-007

From: David Litchfield (david@ngssoftware.com)
Date: 03/21/03

  • Next message: Rafael Nuņez: "[VulnWatch] iis 0day exploit"
    From: "David Litchfield" <david@ngssoftware.com>
    To: <ntbugtraq@listserv.ntbugtraq.com>, <vulnwatch@vulnwatch.org>, <bugtraq@securityfocus.com>
    Date: Fri, 21 Mar 2003 16:16:16 -0000
    
    

    The patch announced by Microsoft on the 17th March 2003 fixed a security
    vulnerability in the core of the Windows 2000 operating system. This flaw
    was actively being exploited through WebDAV requests to Microsoft's Internet
    Information Server 5. It must be stressed that IIS was simply the attack
    vector; the method or route used to actually exploit the flaw. The problem,
    however, is much wider in scope than just simply machines running IIS.
    Researchers at NGSSoftware have isolated many more attack vectors including
    java based web servers and other non-WebDAV related issues in IIS. Due to
    this, NGSSoftware urge Windows 2000 users to apply the patch.

    For a paper that examines the vulnerability in detail, please read
    http://www.ngssoftware.com/papers/ms03-007-ntdll.pdf .

    Cheers,
    David Litchfield
    NGSSoftware Ltd
    +44(0)208 401 0070
    http://www.ngssoftware.com/


  • Next message: Rafael Nuņez: "[VulnWatch] iis 0day exploit"

    Relevant Pages

    • New attack vectors and a vulnerability dissection of MS03-007
      ... vulnerability in the core of the Windows 2000 operating system. ... is much wider in scope than just simply machines running IIS. ... Researchers at NGSSoftware have isolated many more attack vectors including ... For a paper that examines the vulnerability in detail, ...
      (Bugtraq)
    • Windows kernel overflow fixed
      ... John Heasman of NGSSoftware has discovered a high risk vulnerability in the ... Microsoft Windows kernel. ... Microsoft has developed a patch to fix the problem. ... NGSSoftware are going to withhold details about this flaw for three months. ...
      (NT-Bugtraq)
    • Re: New attack vectors and a vulnerability dissection of MS03-007
      ... >vulnerability in the core of the Windows 2000 operating system. ... is much wider in scope than just simply machines running IIS. ... NGSSoftware urge Windows 2000 users to apply the patch. ...
      (NT-Bugtraq)
    • Windows kernel overflow fixed
      ... John Heasman of NGSSoftware has discovered a high risk vulnerability in the ... Microsoft Windows kernel. ... Microsoft has developed a patch to fix the problem. ... NGSSoftware are going to withhold details about this flaw for three months. ...
      (Bugtraq)
    • [VulnWatch] Windows kernel overflow fixed
      ... John Heasman of NGSSoftware has discovered a high risk vulnerability in the ... Microsoft Windows kernel. ... Microsoft has developed a patch to fix the problem. ... NGSSoftware are going to withhold details about this flaw for three months. ...
      (VulnWatch)