Windows DNS server RPC management interface buffer overflow
Added: 04/16/2007CVE: CVE-2007-1748
BID: 23470
OSVDB: 34100
Background
The Windows DNS service runs an RPC management interface which listens on a dynamically assigned TCP port.Problem
A buffer overflow vulnerability in the Windows DNS service allows remote attackers to execute arbitrary commands by sending a specially crafted RPC request to the management interface port.Resolution
See Microsoft Security Advisory 935964 for information on available updates and workarounds.References
http://www.us-cert.gov/cas/techalerts/TA07-103A.htmlLimitations
Exploit works on Windows 2000 SP0 to SP4 and Windows Server 2003 SP1 and SP2.Platforms
Windows 2000Windows Server 2003
Back to exploit index