Bugtraq mailing list archives

Re: Windows 2000 .printer remote overflow proof ofconcept exploit

From: Nobuo Miwa <n-miwa () LAC CO JP>
Date: Thu, 3 May 2001 15:33:45 +0900

Hi,

  http://www.eeye.com/html/research/Advisories/iishack2000.c


That didn't work against Japanese version.
I've tried and got followings ;

   352 of 'a' + 0x7801CB65(address of "call ebx")

It will work against non-SP and SP1.

Cheers,
<Nobuo Miwa> n-miwa () lac co jp       ( @ @ ) http://www.lac.co.jp/security/
-------------------------------o00o--(. .)--o00o--------------------------

Current thread:

Windows 2000 .printer remote overflow proof of concept exploit Marc Maiffret (May 02)
- Re: Windows 2000 .printer remote overflow proof of concept exploit Matt Power (May 02)
  - Re: Windows 2000 .printer remote overflow proof of concept exploit David Litchfield (May 03)
  - Re: Windows 2000 .printer remote overflow proof ofconcept exploit Nobuo Miwa (May 03)