Published: 12/12/2007 Updated: 16/10/2018

CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8

VMScore: 920

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

Subscribe to Windows 2000

Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows malicious users to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft message_queuing

/* Windows Message Queuing Service Remote RPC BOF Exploit (MS07-065) Mod of axis's code CHANGELOG - added dnsname as a parameter, before it was hardcoded in the request data (Marcin Kozlowski) Provided for legal security research and testing purposes ONLY Go through the code :) */ #include <stdioh> #include <stdlibh> #i ...

****************************************************************************** ********************** merry christmas Sysadmins ***************************** ****************************************************************************** ************** Microsoft Message Queue POC exploit ( MS07-065 ) ************** Mario Ballano - (mballano~gmail ...

/* Windows Message Queuing Service Remote RPC BOF Exploit (MS07-065) by axis wwwph4nt0morg you should know the dnsname of target to trigger this vuln the service runs on port 2103/2105/2107 D:\soft\develop\MyProjects\temp\Debug>tempexe -h 192168152100 -p 2103 ------------------------------------------------------------------ ...

## # $Id: ms07_065_msmqrb 9929 2010-07-25 21:37:54Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class ...

CWE-119 http://www.zerodayinitiative.com/advisories/ZDI-07-076.html http://www.securityfocus.com/bid/26797 http://www.securitytracker.com/id?1019077 http://secunia.com/advisories/28011 http://secunia.com/advisories/28051 http://www.us-cert.gov/cas/techalerts/TA07-345A.html http://www.vupen.com/english/advisories/2007/4181 https://www.exploit-db.com/exploits/4934 https://www.exploit-db.com/exploits/4760 https://www.exploit-db.com/exploits/4745 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065 http://www.securityfocus.com/archive/1/485268/100/0/threaded http://www.securityfocus.com/archive/1/484891/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/4934/

CVE-2007-3039

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect