Bowulf Infosec & Network Admin BlogBowulf, a network admin, describes his quest for information security, to lose 200 pounds, and being a Novell engineer administrating in a Windows world.Exploit Release: Microsoft Windows 2KXP Task Scheduler .job Exploit (MS04-022)- July 20, 2004 K-OTik : MS04-022 Microsoft Windows 2KXP Task Scheduler .job Exploit (MS04-022) Microsoft Windows 2KXP Task Scheduler Vulnerability (MS04-022) Proof-of-Concept Exploit for English WinXP SP1 15 Jul 2004 Running this will create a file "j.job". When explorer.exe or any file-open dialog box accesses the directory containing this file, notepad.exe will be spawn. Greetz: snooq, sk and all guys at SIG2 www security org sg One more of the new Microsoft vulnerabilities has already made it...http://www.network-admin.net/archives/000351.html Exploit Release: Windows 2000 Utility Manager all in one Exploit (MS04-019)- July 20, 2004 K-OTik : Windows 2000 Utility Manager all in one Exploit (MS04-019) Crpt Utility Manager exploit v2.666 modified by kralor Crpt It gets system language and sets windows names to work on any win2k :P Feel free to add other languages :) v2.666: added autonomous (allinone) remote exploitation system ;) It can be executed through poor cmd.exe shells (like nc -lp 666 -e cmd.exe from a normal user account). Must be called with an argument (any argument) You know where we are.. ...http://www.network-admin.net/archives/000349.html |