infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Updated to make it clear that 2003 is not affected (thanks for the feedback for those who tested) 

git-svn-id: file:///home/svn/framework3/trunk@7012 4d416f70-5f16-0410-b530-b9f4589650da
unstable
HD Moore 2009-09-08 20:27:41 +00:00
parent 7006acc1a8
commit 232ca24b46
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
modules/auxiliary/dos/windows/smb/smb2_negotiate_pidhigh.rb
View File

@ -19,16 +19,15 @@ class Metasploit3 < Msf::Auxiliary
'Name' => 'Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference',
'Description' => %q{
This module exploits an out of bounds function table dereference in the SMB
Negotiate request parsing code of the SRV2.SYS driver included with Windows Vista
, Windows 7, and Windows 2008 Server. It is likely that this flaw also affects
Windows 2003 SP1/SP2, but this has not been confirmed. Windows Vista without SP1
does not seem affected by this flaw (but is affected by vista_negotiate_stop).
Negotiate request parsing code of the SRV2.SYS driver included with Windows Vista,
Windows 7, and Windows 2008 Server. Windows Vista without SP1 does not seem
affected by this flaw (but is affected by vista_negotiate_stop).
},
'Author' => [ 'laurent.gaffie[at]gmail.com', 'hdm' ],
'License' => MSF_LICENSE,
'Version' => '$Revision$',
'References' =>
'References' =>
[
['URL', 'http://seclists.org/fulldisclosure/2009/Sep/0039.html'],
]