|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: Buffer overflow in Microsoft ftp.exe
rdusek
myway.com
Date: Wed Apr 30 2003 - 11:30:17 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
In-Reply-To: <Law8-F50RC6HixqDCZx0000a7f4hotmail.com>
>if an attacker with axx to the system is able to modify the scriptfile
he
>can modify the script and place an evil command Quote
AAAAAA..SHELLCODE...
>and execute code with elevated privileges.
The attacker would only be executing code in the context of the user
running FTP.exe... Not necessarily elevated privileges.
-Robert Dusek
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]