DCOM Exploit MS03-026 attack vectors

["Paul Tinsley" <pdt () jackhammer org>]

Microsoft owns up to the exploit being usable on 135, 139 and 445, I have
heard rumors of port 80 being vulnerable as well.  I was curious as to
whether anyone had seen anything using a port other than 135?  Everything I
have seen discussed here and elsewhere has been 135 specific.

 

Thanks,

Paul Tinsley

Email:   <pdt () jackhammer org>

Web:     http://www.jackhammer.org

Phone:   +1 615 973-5353

Pager:   +1 615 960-7766

Mail:    2228 Spartan Ct.

         Murfreesboro, TN 37128-5395