Remote exploit for dproxy versions 0.5 and below. Binds a shell to TCP port 4444.
71d56c60f1e232a94229b71556636b01433745ed2ae92d6b6761ae4dc0da6e6eNDPROXY is a system-provided driver that interfaces WAN miniport drivers, call managers, and miniport call managers to the Telephony Application Programming Interfaces (TAPI) services. The vulnerability is caused when the NDProxy.sys kernel component fails to properly validate input. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode (i.e. with SYSTEM privileges).
10347041ea74c6b447143df9dd4aa3555e238a1fcca1ba360cd0d9e113076d9dThis Metasploit module exploits a flaw in the ndproxy.sys driver on Windows XP SP3 and Windows 2003 SP2 systems, exploited in the wild in November, 2013. The vulnerability exists while processing an IO Control Code 0x8fff23c8 or 0x8fff23cc, where user provided input is used to access an array unsafely, and the value is used to perform a call, leading to a NULL pointer dereference which is exploitable on both Windows XP and Windows 2003 systems. This Metasploit module has been tested successfully on Windows XP SP3 and Windows 2003 SP2. In order to work the service "Routing and Remote Access" must be running on the target system.
6dc1df60dff4c2b60d7508a57233b6b3e7f565f218bceb0acc2a53045b172ce0Microsoft Windows NDPROXY local SYSTEM privilege escalation exploit.
dd6bdb68bcaccda8d1acd0e40e21c622c59fee9f99c088434f4131899b2cdfedVulnerable installations of Umbraco allow unauthenticated users to abuse the script FeedProxy.aspx into proxying requests on their behalf through the "url" parameter.
19987edc1f1a1fecf2c9df97f5014d7f25ea604cf74d0337f115ba76e02245bcSecunia Security Advisory - mu-b has discovered a vulnerability in dproxy-nexgen, which can be exploited by malicious people to compromise a vulnerable system.
71991cbf8a63bd92bc3f851651d2a1c5edb02caa43f09b8308e42620a37d7862Secunia Security Advisory - Alexander Klink has reported a vulnerability in dproxy, which can be exploited by malicious people to compromise a vulnerable system.
4b5e0ec5228fed0b3fcf6aee94e92431d3a9f9f48d633561ed39ba636c2c2a3cMetaSploit exploit for the remote buffer overflow issue in dproxy versions 0.5 and below.
93a48384d4123533a4cf4d4b95a8e2faf0006039c1860712e18e3f39485121bcdproxy suffers from a typical buffer overflow condition, which allows an attacker to overwrite the stack. Version 0.5 and below are affected.
105b19b9f636ba774d84d4ddd91b39ff45110d8e236554da8ee19b7dd5e116e5
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed