[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday
- To: full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: Re: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday
- From: Kingcope <kcope2@xxxxxxxxxxxxxx>
- Date: Mon, 31 Aug 2009 22:31:51 +0200
Hello list,
I have to clarify some things on the globbing vulnerability here.
The posted PoC (with the fine art) does NOT exploit IIS6 ftp servers,
IIS6 ftp server IS affected by the buffer overflow but is properly protected
by stack canaries. AFAIK it looks like a DoS on Windows Server 2003.
Until someone finds a way to bypass Stack Canaries on recent Windows
versions this remains a DoS on IIS6.
Thanks to HD Moore and all people in the past you wrote exploits for
my releases!
Kudos!
Nikolaos
2009/8/31 Kingcope <kcope2@xxxxxxxxxxxxxx>:
> (see attachment)
>
> Cheerio,
>
> Kingcope
>
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/