Re: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability

From: Nicolas Gregoire (ngregoireat_private)
Date: Tue Mar 18 2003 - 12:25:36 PST

Next message: the1at_private: "RE: command-line reverse connection tunnel?"

Previous message: Dave Aitel: "Re: Spike"
In reply to: Gary O'leary-Steele: "Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability"
Next in thread: Curt Purdy: "RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability"
Next in thread: Royans Tharakan: "RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability"
Reply: Curt Purdy: "RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> I am planning to write exploit code for the Microsoft Windows 2000 WebDAV
> Buffer Overflow Vulnerability. However I don't have enough information about
> the vulnerability, e.g. which webdav component is vulnerable, how it is
> exploited i.e. where does the large string need to be to cause the overrun.
> I don't know webdav but if i get enough information about the request i need
> to send to the web server to cause a crash I will write some exploit code
> (in perl) and share with the community.

You could give a look to the related Nessus plugin :
http://cvs.nessus.org/cgi-bin/cvsweb.cgi/~checkout~/nessus-plugins/scripts/iis_webdav_overflow.nasl


Regards,
-- 
Nicolas Gregoire ----- Consultant en Sécurité des Systèmes d'Information
ngregoireat_private ------[ ExaProbe ]------ http://www.exaprobe.com/
PGP KeyID:CA61B44F  FingerPrint:1CC647FF1A55664BA2D2AFDACA6A21DACA61B44F

application/pgp-signature attachment: This is a digitally signed message part

Next message: the1at_private: "RE: command-line reverse connection tunnel?"
Previous message: Dave Aitel: "Re: Spike"
In reply to: Gary O'leary-Steele: "Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability"
Next in thread: Curt Purdy: "RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability"
Next in thread: Royans Tharakan: "RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability"
Reply: Curt Purdy: "RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Mar 18 2003 - 12:43:22 PST