Exploit for MS05-039 in the wild

Account
♦ Password
♦ Mailsetup
♦ Info
Services
♦ Workstations
♣ Linux
♣ MacOS
♦ E-Mail
♦ Chat
♦ Files
♦ Backups
♦ Printers
♦ Network
♦ Statistics
♦ Downloads
♦ Links
News
♦ Newsletter
♦ Submit
♦ Search
Readme
Hacks
♦ Linux
Tools
Contact
About

Exploit for MS05-039 in the wild

Posted by Beat Rubischon on Friday August 12, @08:14AM
from the patch or poweroff dept.
Microsoft announced last night the availabilty of the exploit code against the hole in the PnP Code of Windows.

Users running Windows 2000 must install the patch today or disconnect their workstation during weekend.
We don't have the exploit yet and even no scanner. But we keep you informed about this topic!

< | >

Related Links

Articles on Microsoft

Also by Beat Rubischon

Contact author

The Fine Print: The following comments are owned by whoever posted them.
( Reply )

Exploit code available
by Fabian Wenk on Friday August 12, @01:59PM

The exploit code went through the Full-Disclosure security mailinglist. See the article Windows 2000 universal exploit for MS05-039 in the list archive.

[ Reply to this ]

Re: Exploit code available
by Beat Rubischon on Friday August 12, @06:47PM

Backup is everything. The same code is also on BUGTRAQ.

[ Reply to this ]

Re: Exploit code available
by Beat Rubischon on Friday August 12, @06:50PM

Yet seen on BUGTRAQ: a cleaned up version of the exploit, also working from Linux.

[ Reply to this ]

Re: Exploit code available
by Otte Homan on Friday August 19, @04:33PM

Warum wird so etwas publiziert? Ich habe selber 3 verschiedene Varianten von diesem Wurm gesehen. Warum publiziert man solchen Code, so dass nun beliebig viele Kids diese Wuermer in der Welt setzen koennen? Haftet Sl0ppy denn gar nicht fuer so was?

[ Reply to this ]

Worm in the wild
by Fabian Wenk on Sunday August 14, @07:49PM

According to the SANS Internet Storm Center there is a worm around, read more at theirs Handler's Diary August 14th 2005.

[ Reply to this ]

The Fine Print: The following comments are owned by whoever posted them.
( Reply )