Bug #800
kitrap0d.rb doesn't work on win2k - applies to some SPs of XP too
| Status: | New | Start: | 01/31/2010 | |
|---|---|---|---|---|
| Priority: | Normal | Due date: | ||
| Assigned to: | Joshua Drake | % Done: | 0% |
|
| Category: | exploit bugs | |||
| Target version: | Metasploit 3.5 | |||
| Resolution: |
Description
A comment in the code vdmexploit.c states:
"Windows 2000 forces the thread to exit with 0x80 if Padding3 is filled with junk. With a buffer full of NULLs, the exploit never finds the right size. This will require more work to resolve, for just keep the padding zero'd."
This same exit code appears in unpatched Windows XP Pro and Windows XP Pro SP1/SP1a. It does not appear in windows XP Pro SP2 or SP3.