Published: 13/10/2005 Updated: 12/10/2018

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 660

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated malicious users to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows xp
microsoft windows 2000

Microsoft Windows Plug and Play "Umpnpmgrdll" Remote Exploit (MS05-047) Date : 21/10/2005Advisory : [25]FrSIRT/ADV-2005-2044CVE ID : [26]CVE-2005-2120Rated as : [27]High Risk [3gif] #include <stdioh>#include <windowsh>#pragma comment(lib, "mpr")#pragma comment(lib, "Rpcrt4")unsigned char szBindString[] ={0x05,0x00,0x0b,0x03,0x1 ...

// tested and approved /str0ke /* Program: Denial of Service attack for MS UMPNPMGR PNP_GetDeviceList * Author: Winny Thomas * Vulnerability: no length checking on passed parameter to PNP_GetDeviceList in UMPNPMGRdll * Note: The code crashes servicesexe on the target, effectively bringing down the target against which its run * This code is ...

#include <stdioh> #include <windowsh> #pragma comment(lib, "mpr") #pragma comment(lib, "Rpcrt4") unsigned char szBindString[] = { 0x05,0x00,0x0b,0x03,0x10,0x00,0x00,0x00,0x48,0x00,0x00,0x00,0x01,0x00,0x00,0x00, 0xb8,0x10,0xb8,0x10,0x00,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x00,0x00,0x01,0x00, 0x40,0x4e,0x9f,0x8d, ...

this script search exploit online using shell script

Online MSF reference checker This script will get the input of any reference and give you the msf exploit name and it's howto Input USAGE:/msf-chksh <reference> Eg: /msf-chksh CVE-1999-0256 Eg: /msf-chksh BID-36075 Eg: /msf-chksh OSVDB-18830 Eg: /msf-chksh MSB-MS02-039 To get the output as csv format USAGE:/m

NVD-CWE-Other http://www.us-cert.gov/cas/techalerts/TA05-284A.html http://www.kb.cert.org/vuls/id/214572 http://www.osvdb.org/18830 http://www.eeye.com/html/research/advisories/AD20051011c.html http://securitytracker.com/id?1015042 http://www.securityfocus.com/bid/15065 http://secunia.com/advisories/17166 http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf http://secunia.com/advisories/17172 http://secunia.com/advisories/17223 http://securityreason.com/securityalert/71 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1519 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1328 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1244 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-047 https://nvd.nist.gov https://github.com/x00itachi/metasploit-exploit-search-online https://packetstormsecurity.com/files/41260/20051021.MS05-047.c.html https://www.exploit-db.com/exploits/1271/https://www.kb.cert.org/vuls/id/214572

CVE-2005-2120

Vulnerability Summary

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect