Re: Probes on port 389

["Frank Boldewin" <frank.boldewin () gmx de>]

hi,

i'm really sure that this is the exploit which was released by coromputer.
further i think this one only can work for imail ldap 8.
other imail versions like 6 or 7 just get DoSed, because if you wanna get a
shell
on 6 and 7, you have to place the SEH 8 bytes higher.
in addition this exploit depends on the OS version to get a shell.

greetings,
frank

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html