Re: [Full-disclosure] Funny bugs in Windows Server 2003

[Rubén Camarero <rjcamarero@xxxxxxxxx>]

You should clarify that the triggers fot these 31337 non-real security bugs
are "%n" x 1100 and not "%n%n%n..." x 1100 for the lower intelligence crowd
that currently subscribes to this list.

FYI: Microsoft's operating system, Windows, has many format overflows in
_vsprintf() that result in the BSOD when owning kernel drivers.

On Mon, Mar 30, 2009 at 2:13 PM, <exceed@xxxxxxxxx> wrote:

> "Cuz they say two thousand zero zero party over - Oops, out of time.
> So tonight I'm gonna party like it's 1999"
>
>  sort.exe %n%n%n... x 1100
>  odbcconf.exe %n%n%n... x 1100
>  locator.exe %n%n%n... x 1100
>  ldifde.exe %n%n%n... x 1100
>  cprofile.exe %n%n%n... x 1100
>  csvde.exe %n%n%n... x 1100
>
> As found on Windows Server 2003 R2 SP2.
>
> I didn't report this to Microsoft, because I am pretty sure they already
> know
> about. Anyhow, this bugs are not _real_ security issues.
>
> Some things never change.
>
>
> /exceed
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>



-- 
Rubén Camarero
CCNA, CISSP

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/