OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: The Blueberry (acr872k_at_hotmail.com)
Date: Tue Jan 21 2003 - 15:58:31 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    >Basically, a simple telnet to the open TCP port causes a particular
    >service to die.

    [...]

    >I attempted to send many 0x41 chars, and then checked the various
    >registers in the state dump (dr watson log file) but it does not appear
    >that my data is getting through.

    If you just telnet and it crashes the service right away don't even try to
    do something with your remaining telnet session..

    >Dr. Watson - exception number: c0000005 (access violation)

    >FAULT -> 00403224 8b07 mov eax,[edi] ds:00000000=????????

    c0000005 is access violation in read operation. Basically here you smashed
    your data segment and try to read from it. The most you could do is go up a
    bit in the program disassembly and find what smashes ds to see is you can
    get something else to get smashed.

    ~TB

    _________________________________________________________________
    The new MSN 8: advanced junk mail protection and 2 months FREE*
    http://join.msn.com/?page=features/junkmail