Buffer Overrun In RPC Interface

[Hakimi]

مشکل جديد درويندوز 2000 و XP
Buffer Overrun In RPC Interface
سريعا برای رفع مشکل به اين آدرس ها مراجعه کنيد :

ويندوز 2000
http://www.microsoft.com/downloads/d...displaylang=enhttp://www.microsoft.com/downloads/details.aspx?FamilyID=c8b8a846-f541-4c15-8c9f-220354449117&amp;displaylang=en</a>

ويندوز XP
http://www.microsoft.com/downloads/d...displaylang=enhttp://www.microsoft.com/downloads/details.aspx?FamilyID=2354406c-c5b6-44ac-9532-3de40f69c074&amp;displaylang=en</a>

---

موضوعات مشابه:

• خطای overrun
• حملات Buffer Overflow را طراحي كرده و بنويسيم ؟
• يك ابزار امنيتي مناسب براي جلوگيري از حملات Buffer overflows
• icp و monitor interface و http interface
• Buffer Overrun In RPCSS Service Could Allow Code Execution

---

[en2fa]

برایه hack کردن باهاشم یک سری بزنین به اینجا
<a href='http://www.xfocus.org' target='_blank'>http://www.xfocus.org</a>

من مشقول نوشتن یک hacktool باهاش بودم و قصدم هم امتحانش
رویه persiantools بود که دیگه خوده moderator گفت

[Hakimi]

Blaster Worm - Details & Technical Analysis

Worm is Exploiting Microsoft RPC DCOM Vulnerability

A worm began spreading on the Internet early Monday morning that exploits a recent vulnerability in Microsoft Operating Systems. The worm, dubbed Blaster, takes advantage of a known vulnerability in Microsoft RPC DCOM that affects all current versions of Windows NT, Windows 2000, Windows XP, and Windows Server 2003.

The worm begins by targeting Microsoft systems that have not been properly patched for the known RPC DCOM vulnerability. Once the worm detects an unpatched system, it will attempt to download and run a file called msblast.exe. If successful in infecting a system, the worm will propagate itself, modify Windows registry settings, and initiate a SYN flood denial-of-service attack on windowsupdate.com.

The worm payload does not contain any additional malicious content; however, because of the nature of the worm and the speed at which it attempts to impact systems, it can potentially create a denial-of-service attack against windowsupdate.com.

[en2fa]

اینجوری که من میدنم تممی systemهایه windows مشکل دارن باهاش از 95 تا windows server 2003

[Hooman]

خيلی هم جديد نيست!
[left:bc703ff80c]It has been posted on windows update site (3 or 4 weeks ago) and if you regularly check that site or your system is configured to retrieve updates automatically, then your windows is already patched. See "add/remove programs" in control panel to find out if the patch (Windows XP Hotfix - KB823980) is installed.[/left:bc703ff80c]

[en2fa]

والا این چیزی که من میدونم جدیده یعنی به 2-3 هفته پیش نمیرسه حداکثر ماله
یک هفته پیشه،در ثانی بابا uptodate!!!!

[aaber_piade]

از بس اين سيستم windows update خودكار مايكروسافت پر اشكال و پر از باگ هست كه همه از كار ميندازنش وگرنه در حالت پيش گزيده خودش بايد اين ها رو بگيره و نصب كنه منتها وسط دانلود يكي از اينها كه باشي و فرضا سيستم رو ريستارت كني مشكل به وجود مياد و همه بيخيالش مي شن، البته در ورژن هاي قبليش اگر يادتون باشه اصلا تسك بار رو از كار مينداخت بعدا درستش كردن ولي بازم مشكل داره هنوز!

[Hakimi]

اين كرم (ويروس) از روز دوشنبه صبح شروع به فعاليت كرد و سيستمهايي كه update نشده بودند رو دچار مشكل كرد.

[Hooman]

[left:f26ad60a65]
<a href='http://www.microsoft.com/security/incident/blast.asp' target='_blank'>What You Should Know About the Blaster Worm and Its Variants</a>

<a href='http://www.microsoft.com/technet/newsgroups/?url=/technet/newsgroups/NodePages/security.asp' target='_blank'>Free Support</a>

<a href='http://www.microsoft.com/security/incident/blast_faq.asp' target='_blank'>‌Blaster Worm FAQ</a>

<a href='http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/virus/alerts/msblaster.asp' target='_blank'>Get More Details in the Technical Virus Alert</a>
[/left:f26ad60a65]