Full Disclosure mailing list archives

Re: DCOM Exploit : FAQ

From: <upb () online com ua>
Date: Tue, 29 Jul 2003 18:15:04 +0300

From: "Nicolas RUFF (lists)" <ruff.lists () edelweb fr>

Note the corresponding address (should look like 0x7???????, otherwise
your disassembler is not smart enough to add the section base address to
relative addresses).


Its called image base, not section base btw (there is no such thing as the
section base,
there are virtual and physical offsets of each section)

upb

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

RE: DCOM RPC exploit (dcom.c) fulldisclosure (Jul 27)
- <Possible follow-ups>
- Re: DCOM RPC exploit (dcom.c) democow .... (Jul 27)
- RE: DCOM RPC exploit (dcom.c) John . Airey (Jul 28)
  - DCOM Exploit : FAQ Nicolas RUFF (lists) (Jul 28)
    - Re: DCOM Exploit : FAQ upb (Jul 29)