This is indeed a reverse shell exploit. It appears to be broken though, at least when directed against my XP SP1 virtual machine. It's also not portable; you have to specify the target OS/service pack. Certainly doesn't look like it's far off though; I'd expect to see a lot of kiddies with working code fairly soon, although it will crash the target if you guess the wrong service pack.
Hands up if you're patched. Hands up if you know for certain that every machine in your organisation is patched... Chris On Fri, 25 Jul 2003, D C wrote: > > I noticed there is a an exploit in the archive at http://www.K-otiK.com titled "MS > Windows RPC DCOM Interface Buffer Overflow Exploit" (the file itself is > 07.21.MS03-026.c). I have not had a chance to review the code closely, yet... is > this an exploit based on the Windows RPC advisory released by The Last Stage of > Delirium recently? > > > > > --------------------------------- > Do you Yahoo!? > The New Yahoo! Search - Faster. Easier. Bingo. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
