[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    Re: [Full-disclosure] Funny bugs in Windows Server 2003
From:       Rubén_Camarero <rjcamarero () gmail ! com>
Date:       2009-03-30 23:10:44
Message-ID: 5e9568cb0903301610y28acdae6nf8aaee9416d42eed () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


You should clarify that the triggers fot these 31337 non-real security bugs
are "%n" x 1100 and not "%n%n%n..." x 1100 for the lower intelligence crowd
that currently subscribes to this list.

FYI: Microsoft's operating system, Windows, has many format overflows in
_vsprintf() that result in the BSOD when owning kernel drivers.

On Mon, Mar 30, 2009 at 2:13 PM, <exceed@volja.net> wrote:

> "Cuz they say two thousand zero zero party over - Oops, out of time.
> So tonight I'm gonna party like it's 1999"
>
>  sort.exe %n%n%n... x 1100
>  odbcconf.exe %n%n%n... x 1100
>  locator.exe %n%n%n... x 1100
>  ldifde.exe %n%n%n... x 1100
>  cprofile.exe %n%n%n... x 1100
>  csvde.exe %n%n%n... x 1100
>
> As found on Windows Server 2003 R2 SP2.
>
> I didn't report this to Microsoft, because I am pretty sure they already
> know
> about. Anyhow, this bugs are not _real_ security issues.
>
> Some things never change.
>
>
> /exceed
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>



-- 
Rubén Camarero
CCNA, CISSP

[Attachment #5 (text/html)]

You should clarify that the triggers fot these 31337 non-real security bugs are &quot;%n&quot; \
x 1100 and not &quot;%n%n%n...&quot; x 1100 for the lower intelligence crowd that currently \
subscribes to this list.<br><br>FYI: Microsoft&#39;s operating system, Windows, has many format \
overflows in _vsprintf() that result in the BSOD when owning kernel drivers.<br> <br><div \
class="gmail_quote">On Mon, Mar 30, 2009 at 2:13 PM,  <span dir="ltr">&lt;<a \
href="mailto:exceed@volja.net">exceed@volja.net</a>&gt;</span> wrote:<br><blockquote \
class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt \
0.8ex; padding-left: 1ex;"> &quot;Cuz they say two thousand zero zero party over - Oops, out of \
time.<br> So tonight I&#39;m gonna party like it&#39;s 1999&quot;<br>
<br>
  sort.exe %n%n%n... x 1100<br>
  odbcconf.exe %n%n%n... x 1100<br>
  locator.exe %n%n%n... x 1100<br>
  ldifde.exe %n%n%n... x 1100<br>
  cprofile.exe %n%n%n... x 1100<br>
  csvde.exe %n%n%n... x 1100<br>
<br>
As found on Windows Server 2003 R2 SP2.<br>
<br>
I didn&#39;t report this to Microsoft, because I am pretty sure they already know<br>
about. Anyhow, this bugs are not _real_ security issues.<br>
<br>
Some things never change.<br>
<br>
<br>
/exceed<br>
<br>
<br>
_______________________________________________<br>
Full-Disclosure - We believe in it.<br>
Charter: <a href="http://lists.grok.org.uk/full-disclosure-charter.html" \
target="_blank">http://lists.grok.org.uk/full-disclosure-charter.html</a><br> Hosted and \
sponsored by Secunia - <a href="http://secunia.com/" \
target="_blank">http://secunia.com/</a><br> </blockquote></div><br><br clear="all"><br>-- \
<br>Rubén Camarero<br>CCNA, CISSP<br>



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[prev in list] [next in list] [prev in thread] [next in thread]