[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    Re: [Full-disclosure] Microsoft Internet Information Server ftpd
From:       Kingcope <kcope2 () googlemail ! com>
Date:       2009-08-31 20:31:51
Message-ID: 72f8221d0908311331s5cf44bd5xe5f269969b378ea0 () mail ! gmail ! com
[Download RAW message or body]

Hello list,

I have to clarify some things on the globbing vulnerability here.
The posted PoC (with the fine art) does NOT exploit IIS6 ftp servers,
IIS6 ftp server IS affected by the buffer overflow but is properly protected
by stack canaries. AFAIK it looks like a DoS on Windows Server 2003.
Until someone finds a way to bypass Stack Canaries on recent Windows
versions this remains a DoS on IIS6.

Thanks to HD Moore and all people in the past you wrote exploits for
my releases!
Kudos!

Nikolaos

2009/8/31 Kingcope <kcope2@googlemail.com>:
> (see attachment)
>
> Cheerio,
>
> Kingcope
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
[prev in list] [next in list] [prev in thread] [next in thread]