vendor:
Windows
by:
prdelka
9.3
CVSS
HIGH
Remote Buffer Overflow
119
CWE
Product Name: Windows
Affected Version From: Windows 2000 SP4
Affected Version To: Windows XP SP2
Patch Exists: YES
Related CWE: CVE-2008-0886
CPE: o:microsoft:windows_2000::sp4, cpe:/o:microsoft:windows_xp::sp2
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2008
Windows RSH daemon <= 1.8 Remote Buffer Overflow Exploit
This module exploits a stack buffer overflow in the Windows RSH service. The vulnerability is triggered when a long string is sent as the first argument to the rsh service. This module has been tested successfully on Windows 2000 SP4 and Windows XP SP2.
Mitigation:
Microsoft has released a patch to address this vulnerability.
