[Full-disclosure] Funny bugs in Windows Server 2003

exceed at volja.net exceed at volja.net
Mon Mar 30 19:13:24 BST 2009


"Cuz they say two thousand zero zero party over - Oops, out of time.
So tonight I'm gonna party like it's 1999"

  sort.exe %n%n%n... x 1100
  odbcconf.exe %n%n%n... x 1100
  locator.exe %n%n%n... x 1100
  ldifde.exe %n%n%n... x 1100
  cprofile.exe %n%n%n... x 1100
  csvde.exe %n%n%n... x 1100

As found on Windows Server 2003 R2 SP2.

I didn't report this to Microsoft, because I am pretty sure they already know
about. Anyhow, this bugs are not _real_ security issues.

Some things never change.


/exceed





Full-Disclosure is hosted and sponsored by Secunia.