Hackers Beware

Exploits for NT

The following are the NT exploits we cover in this chapter:

• GetAdmin

• Sechole

• Red Button

• RDS Security Hole in Microsoft IIS

• Microsoft Shares

• Legion

• Relative shell path vulnerability

• NT DSN Hijack using ODBC data source tools

• Winfreeze

• Microsoft Windows Media Player JavaScript URL Vulnerability

• Microsoft Internet Explorer ‘mstask.exe’ CPU Consumption Vulnerability

• Microsoft MSHTML.DLL Crash Vulnerability

• 2001 IIS 5.0 allows files to be viewed using %3F+.htr

• Media Player 7 and IE Java vulnerability

• IE 5.x/Outlook allows arbitrary programs to be executed using .chm files and the temporary Internet file folder.

• IIS 5.0 with patch Q277873 allows arbitrary commands to be executed on the web server

• Microsoft WINS Domain Controller Spoofing Vulnerability ...