Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security VulnWatch
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: [VulnWatch] CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabil

from [wirepair] Network Security [Permanent Link]
Subject: Re: [VulnWatch] CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities
Date: Tue, 12 Oct 2004 16:43:38 -0800 
You missed the SEARCH IN <request> vector. I believe it calls the same heap 
alloc from STATXMEM.dll
I was having some issues with the string becoming unicoded, but just yesterday 
I got an ascii overwrite
(in the debugger only tho :/). Oh well looks like you snuffed the bug I was
working on in the process :).  Obviously MS fixed this bug in the recent patch. 
Another thing to note,
when requesting ('s I noticed that an internal function was matching my ( with 
a ) since they were using
lstrcpy it totally smashed the heap structures when it became unicode'd. But 
they appeared to fix that as well.
-wire

On Tue, 12 Oct 2004 15:48:49 -0300
 CORE Security Technologies Advisories <advisories@coresecurity.com> wrote:

                Core Security Technologies Advisory
                    http://www.coresecurity.com

           IIS NNTP Service XPAT Command Vulnerabilities



--
Visit Things From Another World for the best
comics, movies, toys, collectibles and more.
http://www.tfaw.com/?qt=wmf

[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • Re: [VulnWatch] CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities, wirepair <=
Previous by Date:  Microsoft Windows NetDDE Service Buffer Overflow, NGSSoftware Insight Security Research
Next by Date:  [VulnWatch] Multiple Vulnerabilities in CoolPHP, R00tCr4ck
Previous by Thread:  Microsoft Windows NetDDE Service Buffer Overflow, NGSSoftware Insight Security Research
Next by Thread:  [VulnWatch] Multiple Vulnerabilities in CoolPHP, R00tCr4ck
Indexes:  [Date] [Thread] [Top] [All Lists]