Full Disclosure mailing list archives
Is Windows TCP/IP source routing PoC code available?
From: Denis Jedig <seclists () syneticon de>
Date: Sun, 25 Jun 2006 20:03:24 +0200
Greetings to the list,As known, Microsoft did announce a security vulnerability concerning an overflow within the TCP/IP stack implementation when source routing fields are used:
http://www.microsoft.com/technet/security/bulletin/MS06-032.mspxIs anyone aware of an exploit or POC code for this vulnerability? The security bulletin states that Windows XP SP2 and Windows Server 2003 SP1 are "secure by default" due to disabled source routing. However, it does not provide sufficient information regarding other operating systems affected, so I would like to check out by myself.
Regards, Denis Jedig syneticon networks GbR _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Windows Live Messenger 8.0 ( Contact List *.ctt ) Heap Overflow Alexander Hristov (Jun 25)
- Is Windows TCP/IP source routing PoC code available? Denis Jedig (Jun 25)
- Re: Is Windows TCP/IP source routing PoC code available? 3APA3A (Jun 27)
- Re[2]: Is Windows TCP/IP source routing PoC code available? Ìèíàåâ_Àíäðåé (Jun 28)
- Re: Re[2]: Is Windows TCP/IP source routing PoC code available? 3APA3A (Jun 29)
- Re: Is Windows TCP/IP source routing PoC code available? 3APA3A (Jun 27)
- Is Windows TCP/IP source routing PoC code available? Denis Jedig (Jun 25)
- Re: Windows Live Messenger 8.0 ( Contact List *.ctt ) Heap Overflow Michele Cicciotti [Khamsa S.A.] (Jun 26)