OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Grzegorz Tworek (grzesio_at_SECURITY.NET.PL)
Date: Thu Aug 01 2002 - 03:00:52 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Some months ago I've informed MS about bug in WindowsNT and Windows2000.
    They promised me to correct this bug in SP3 and they did it.

    Bug is not very dangerous because needs admin rights.
    Error in buffer size while sending socket causes BSOD immediately.

    If you want to review CPP sources (1KB) or download compiled version (40KB)
    you can visit http://gt-apps.w.interia.pl/bsod.htm

    Note that NT 4.0 is still vulnerable. MS promised me appropriate patch but
    they never sent it.

    Regards,
    Grzegorz Tworek
    - - - - - - - - - - - - - - - - - - - - - -
    Orion Instruments Polska
    System Engineer, MCP, MCP+I, MCSE
    http://www.orion.pl