CVE-2005-1983
EXPLOITEDMicrosoft Windows 2000 and XP SP1 - Stack-Based Buffer Overflow in Plug and Play Service
Title source: llmExploitation Summary
CVE-2005-1983 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 5 public exploits from researchers including Metasploit, RoMaNSoFt, houseofdabus, including a Metasploit module exploits/windows/smb/ms05_039_pnp.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in the Windows Plug and Play service (CVE-2005-1983). It includes multiple targets for different Windows versions and service packs, with ROP chains for bypassing DEP on newer systems.
Description
Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
Exploits (5)
This is a Metasploit module exploiting a stack buffer overflow in the Windows Plug and Play service (CVE-2005-1983). It includes multiple targets for different Windows versions and service packs, with ROP chains for bypassing DEP on newer systems.
This is a functional exploit for CVE-2005-1983, targeting the Microsoft Windows Plug-and-Play Service Remote Overflow vulnerability. It includes shellcode and network communication to achieve remote code execution on vulnerable systems.
This is a functional exploit for CVE-2005-1983, targeting the Microsoft Windows Plug-and-Play Service remote overflow vulnerability. It includes shellcode and network communication to achieve remote code execution on vulnerable systems.
This exploit targets CVE-2005-1983 (MS05-039) in Windows 2000 by sending a malformed RPC request to the browser service, triggering a buffer overflow to execute a bind shell on port 8721. The code includes shellcode and leverages the vulnerability in the Plug and Play service.
This Metasploit module exploits a stack buffer overflow in the Windows Plug and Play service (CVE-2005-1983) via DCERPC/SMB, allowing remote code execution on vulnerable systems. It includes multiple targets for different Windows versions and service packs, with ROP chains for bypassing DEP on newer systems.