RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability

From: Aleksander P. Czarnowski (alekc@avet.com.pl)
Date: 03/19/03

  • Next message: Rob Shein: "RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability" 
    Date: Wed, 19 Mar 2003 15:08:13 +0100
From: "Aleksander P. Czarnowski" <alekc@avet.com.pl>
To: "Nicolas Gregoire" <ngregoire@exaprobe.com>, <garyo@sec-1.com>

    > You could give a look to the related Nessus plugin :
    >
    http://cvs.nessus.org/cgi-bin/cvsweb.cgi/~checkout~/nessus-plugins/scrip
    ts/iis_webdav_overflow.nasl

    First of all - just from quick testing - it seems than nessus plugin
    don't work correctly, at least one from 18th of March. Secondly you can
    use a bit brutal method of using LOCK or any other WebDAV method with
    buffer >64kb - it was already discussed on ntbugtraq and snort-sigs I
    believe. But this is still far from working exploit that gives you
    reverse shell...
    Best Regards
    Aleksander Czarnowski
    AVET INS

    ----------------------------------------------------------------------------
    Did you know that you have VNC running on your network?
    Your hacker does. Plug your security holes now!
    Download a free 15-day trial of VAM:
    http://www2.stillsecure.com/download/sf_vuln_list.html

  • Next message: Rob Shein: "RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability"