Re: [PEN-TEST] Cybercop

From: Steve (steveat_private)
Date: Sun Apr 15 2001 - 21:30:24 PDT

Next message: Fernando Cardoso: "[PEN-TEST] SAP tools"

Previous message: Egemen Tas: "Re: [PEN-TEST] Web Server to SQL Server"
In reply to: Barber, Chris: "Re: [PEN-TEST] Cybercop"
Next in thread: Steve: "Re: [PEN-TEST] Cybercop"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I wouldn't use the fact that CyberCop crashes the machine to assume that
Microsoft hasn't fixed the issue.  Take the issue, and attempt the real
exploit instead of relying on Cybercop.  There are far to many variables and
too many other reasons to have LSASS.EXE crash than to assume the MS hasn't
fixed the issue.

-Steve

-----Original Message-----
From: Penetration Testers [mailto:PEN-TESTat_private]On Behalf
Of Barber, Chris
Sent: April 13, 2001 8:56 AM
To: PEN-TESTat_private
Subject: Re: [PEN-TEST] Cybercop


Yes.  I have had that happen to me on NT 4.0 all services packs, despite
what Microsoft says about having fixed the problem.


-----Original Message-----
From: Avi Drabkin [mailto:Avi.Drabkinat_private]
Sent: Thursday, April 12, 2001 6:33 PM
To: PEN-TESTat_private
Subject: [PEN-TEST] Cybercop


Has anyone experienced Cybercop crashing the LSASS.EXE service on NT 4.0
SP6a?

When we were running Cybercop to test for vulnerabilities it inadvertently
crashed every servers LSASS.EXE service rendering the machine unable to
perform any authentication as well as the inability to even shut it down.

Just wondering if anyone has experienced this sort of problem??

Thanks

Next message: Fernando Cardoso: "[PEN-TEST] SAP tools"
Previous message: Egemen Tas: "Re: [PEN-TEST] Web Server to SQL Server"
In reply to: Barber, Chris: "Re: [PEN-TEST] Cybercop"
Next in thread: Steve: "Re: [PEN-TEST] Cybercop"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sun Apr 15 2001 - 08:49:54 PDT