CVE-2009-3103
82Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actepss 90%
da publicação à arma1 dias
Publicada no NVD8 de set.
1ª PoC+1d
metasploit7 de set.
VulnCheck+2842d
probabilidade de exploração
90%top 1% das CVEs
exploração observada
simVulnCheck
17 exploit(s) público(s)
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka "SMBv2 Negotiation Vulnerability." NOTE: some of these details are obtained from third party information.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 17✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16363exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9594exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/10005exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/12524exploitdbwww.exploit-db.com/exploits/40280não verificadoexploitdbwww.exploit-db.com/exploits/14674não verificadogithubgithub.com/Sic4rio/CVE-2009-3103---srv2.sys-SMB-Code-Execution-Python-MS09-050-★ 4githubgithub.com/sooklalad/ms09050★ 1githubgithub.com/nicolasdamians/ms09-050-CVE-2009-3103-exploit★ 0githubgithub.com/sec13b/ms09-050_CVE-2009-3103★ 0githubgithub.com/afifudinmtop/CVE-2009-3103★ 0githubgithub.com/bytejmp/MS09-050★ 0cve_referencewww.exploit-db.com/exploits/9594não verificadovulncheckvulncheck.com/xdb/3be3ed122bdanão verificadovulncheckvulncheck.com/xdb/af8d74b46f87não verificadovulncheckvulncheck.com/xdb/f50cdfe8ce2bnão verificadovulncheckvulncheck.com/xdb/d00df5610cc3não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0090.htmlhttp://blog.48bits.com/?p=510http://g-laurent.blogspot.com/2009/09/windows-vista7-smb20-negotiate-protocol.htmlhttp://isc.sans.org/diary.html?storyid=7093http://osvdb.org/57799https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050http://secunia.com/advisories/36623https://exchange.xforce.ibmcloud.com/vulnerabilities/53090https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6489http://www.exploit-db.com/exploits/9594http://www.kb.cert.org/vuls/id/135940http://www.microsoft.com/technet/security/advisory/975497.mspx