The script mimics the exploit posted on BugTraq. As far as I can tell
it can detect 75 % of vulnerable machines. I hope I'll be able to find
a more reliable test method later (or perhaps someone else playing with
SPIKE and having the stomach to look at rpcss's disassembly will do
it...).
--Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."
it can detect 75 % of vulnerable machines. I hope I'll be able to find
a more reliable test method later (or perhaps someone else playing with
SPIKE and having the stomach to look at rpcss's disassembly will do
it...).
--Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."
Attached Files:
-
msrpc-spike27.nasl (6.77 KB)