Re: MSRPC vulnerability 1 billion and six?

[Dave Aitel <daveaitel () tmail com>]

There's still endpoints you can connect to by default. For example my 
userenum tool works remotely against sp2 just fine.

I'm guessing you send a large integer to function 0x30 in srvsvc via 
\\browser, and xpsp2 falls to basically the same bug. I haven't had time 
to test it yet though.
-dave