Bugtraq mailing list archives
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability.
From: Fyodor <fyodor () insecure org>
Date: Wed, 8 Sep 2010 14:38:39 -0700
On Sun, Sep 05, 2010 at 07:27:53AM -0600, nikhil_uitrgpv () yahoo co in wrote:
1. Overview nmap <= 5.21 is vulnerable to Windows DLL Hijacking Vulnerability.
Nmap is not vulnerable. DLL hijacking works because of an unfortunate interaction between apps which register Windows file extensions and the default Windows DLL search path used for those apps. Nmap does not, and never has, registered any Windows file extensions. So it isn't vulnerable to this issue.
8. Solution Fixed in latest development release.
We have not made a special new development release, nor are we planning one. We do agree that Windows' default DLL search path handling is dumb, so we have added code in our source repository to improve that. It will be included in our next regular release (maybe in a month or so), along with other proactive security improvements such as enabling Windows ASLR and DEP support. Cheers, Fyodor
Current thread:
- nmap <= 5.21 is vulnerable to Windows DLL Hijacking Vulnerability. nikhil_uitrgpv (Sep 07)
- Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability. Fyodor (Sep 09)