Re: [EXPL] (MS04-031) NetDDE buffer overflow vulnerability PoC

From: Alberto Garcia Hierro (tcpdevil_at_linuxlover.org)
Date: 12/31/04

  • Next message: Martin Schulze: "[SECURITY] [DSA 621-1] New CUPS packages fix arbitrary code execution" 
    To: bugtraq@securityfocus.com
Date: Fri, 31 Dec 2004 19:09:02 +0100

    El Viernes, 31 de Diciembre de 2004 00:39, houseofdabus HOD escribió:
    > ---snip---
    > /* HOD-ms04031-netdde-expl.c: 2004-12-30: PUBLIC v.0.2
    > *
    > * Copyright (c) 2004 houseofdabus.
    > *
    > * (MS04-031) NetDDE buffer overflow vulnerability PoC
     I needed to add a few lines to build it on Linux. Here is the diff:

    @@ -11,6 +11,9 @@
     #include <sys/types.h>
     #include <netinet/in.h>
     #include <sys/socket.h>
    +#include <netdb.h>
    +#define Sleep(x) sleep(x)
    +#define closesocket(x) close(x)
     #endif

    Regards,
     Alberto 

    -- 
/* Alberto García Hierro (Skyhusker) */

  • Next message: Martin Schulze: "[SECURITY] [DSA 621-1] New CUPS packages fix arbitrary code execution"