Re: Windows 2000 .printer remote overflow proof ofconcept exploit

[Nobuo Miwa]

Hi,

>   http://www.eeye.com/html/research/Advisories/iishack2000.c

That didn't work against Japanese version.
I've tried and got followings ;

   352 of 'a' + 0x7801CB65(address of "call ebx")

It will work against non-SP and SP1.

Cheers,
<Nobuo Miwa> [EMAIL PROTECTED]       ( @ @ ) http://www.lac.co.jp/security/
-------------------------------o00o--(. .)--o00o--------------------------