Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
Re: [VulnWatch] CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities
From: wirepair (wirepairroguemail.net)
Date: Tue Oct 12 2004 - 19:43:38 CDT
You missed the SEARCH IN <request> vector. I believe it calls the same heap alloc from STATXMEM.dll
I was having some issues with the string becoming unicoded, but just yesterday I got an ascii overwrite
(in the debugger only tho :/). Oh well looks like you snuffed the bug I was
working on in the process :). Obviously MS fixed this bug in the recent patch. Another thing to note,
when requesting ('s I noticed that an internal function was matching my ( with a ) since they were using
lstrcpy it totally smashed the heap structures when it became unicode'd. But they appeared to fix that as well.
On Tue, 12 Oct 2004 15:48:49 -0300
CORE Security Technologies Advisories <advisoriescoresecurity.com> wrote:
> Core Security Technologies Advisory
> IIS NNTP Service XPAT Command Vulnerabilities
Visit Things From Another World for the best
comics, movies, toys, collectibles and more.