CVE-2009-3103
82Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actepss 90%
de la publicación al arma1 días
Publicada en NVD8 sept
1ª PoC+1d
metasploit7 sept
VulnCheck+2842d
probabilidad de explotación
90%top 1% de las CVE
explotación observada
síVulnCheck
15 exploit(s) público(s)
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka "SMBv2 Negotiation Vulnerability." NOTE: some of these details are obtained from third party information.
Productos afectados
n/a · n/aPoCs públicas encontradas — 15✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/10005exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16363exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/12524exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9594exploitdbwww.exploit-db.com/exploits/14674no verificadoexploitdbwww.exploit-db.com/exploits/40280no verificadogithubgithub.com/Sic4rio/CVE-2009-3103---srv2.sys-SMB-Code-Execution-Python-MS09-050-★ 5githubgithub.com/sooklalad/ms09050★ 1githubgithub.com/afifudinmtop/CVE-2009-3103★ 0githubgithub.com/sec13b/ms09-050_CVE-2009-3103★ 0githubgithub.com/nicolasdamians/ms09-050-CVE-2009-3103-exploit★ 0vulncheckvulncheck.com/xdb/f50cdfe8ce2bno verificadovulncheckvulncheck.com/xdb/3be3ed122bdano verificadovulncheckvulncheck.com/xdb/af8d74b46f87no verificadocve_referencewww.exploit-db.com/exploits/9594no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0090.htmlhttp://blog.48bits.com/?p=510http://g-laurent.blogspot.com/2009/09/windows-vista7-smb20-negotiate-protocol.htmlhttp://isc.sans.org/diary.html?storyid=7093http://osvdb.org/57799https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050http://secunia.com/advisories/36623https://exchange.xforce.ibmcloud.com/vulnerabilities/53090https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6489http://www.exploit-db.com/exploits/9594http://www.kb.cert.org/vuls/id/135940http://www.microsoft.com/technet/security/advisory/975497.mspx