critical10.0Public exploit code
CVE-2007-1748
Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Se…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft DNS RPC Service - 'extractQuotedChar()' TCP Overflow (MS07-029) (Metasploit)2010-07-25 · remote · windows · Verified
- Microsoft DNS RPC Service - 'extractQuotedChar()' Remote Overflow 'SMB' (MS07-029) (Metasploit)2010-09-28 · remote · windows · Verified
- Microsoft Windows - DNS RPC Remote Buffer Overflow (2)2007-04-18 · remote · windows · Verified
- Microsoft Windows - DNS DnssrvQuery Remote Stack Overflow2007-04-15 · remote · windows · Verified
- Microsoft Windows Server 2000 SP4 - DNS RPC Remote Buffer Overflow2007-04-15 · remote · windows · Verified
Impact
Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape sequences.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows 2003 Server | Versions sp1, sp2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://blogs.technet.com/msrc/archive/2007/04/12/microsoft-security-advisory-935964-posted.aspx
- http://metasploit.com/svn/framework3/trunk/modules/exploits/windows/dcerpc/msdns_zonename.rb
- http://secunia.com/advisories/24871
- http://www.kb.cert.org/vuls/id/555920
- http://www.microsoft.com/technet/security/advisory/935964.mspx
- http://www.securityfocus.com/archive/1/465863/100/100/threaded
- http://www.securityfocus.com/archive/1/468871/100/200/threaded
- http://www.securityfocus.com/bid/23470
- http://www.securitytracker.com/id?1017910
- http://www.us-cert.gov/cas/techalerts/TA07-103A.html
- http://www.us-cert.gov/cas/techalerts/TA07-128A.html
- http://www.vupen.com/english/advisories/2007/1366
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-029
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33629
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1228
- http://blogs.technet.com/msrc/archive/2007/04/12/microsoft-security-advisory-935964-posted.aspx
- http://metasploit.com/svn/framework3/trunk/modules/exploits/windows/dcerpc/msdns_zonename.rb
- http://secunia.com/advisories/24871
- http://www.kb.cert.org/vuls/id/555920
- http://www.microsoft.com/technet/security/advisory/935964.mspx
- http://www.securityfocus.com/archive/1/465863/100/100/threaded
- http://www.securityfocus.com/archive/1/468871/100/200/threaded
- http://www.securityfocus.com/bid/23470
- http://www.securitytracker.com/id?1017910
- http://www.us-cert.gov/cas/techalerts/TA07-103A.html