vendor:
Microsoft Message Queueing Service
by:
hdm
N/A
CVSS
N/A
Stack buffer overflow
CWE
Product Name: Microsoft Message Queueing Service
Affected Version From: Windows 2000 ALL / Windows XP SP0-SP1 (English)
Affected Version To: Unknown
Patch Exists: Unknown
Related CWE: CVE-2005-0059
CPE:
Platforms Tested: Windows
2005
Microsoft Message Queueing Service Path Overflow
This module exploits a stack buffer overflow in the RPC interface to the Microsoft Message Queueing service. The offset to the return address changes based on the length of the system hostname, so this must be provided via the 'HNAME' option. Much thanks to snort.org and Jean-Baptiste Marchand's excellent MSRPC website.
Mitigation:
Unknown