CVE-2007-1748
EXPLOITEDWindows 2000 Server SP4 and Server 2003 SP1/SP2 - Remote Code Execution via DNS RPC Zone Name Overflow
Title source: llmExploitation Summary
CVE-2007-1748 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 7 public exploits from researchers including Metasploit, Andres Tarasco, Winny Thomas, including a Metasploit module exploits/windows/smb/ms07_029_msdns_zonename.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in the Microsoft DNS RPC service (CVE-2007-1748) via escaped octal strings in zone names. It bypasses NX/DEP on Windows 2003 SP1/SP2 and requires SMB authentication.
Description
Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape sequences.
Exploits (7)
This is a Metasploit module exploiting a stack buffer overflow in the Microsoft DNS RPC service (CVE-2007-1748) via escaped octal strings in zone names. It bypasses NX/DEP on Windows 2003 SP1/SP2 and requires SMB authentication.
This is a Metasploit module exploiting a stack buffer overflow in the Microsoft DNS RPC service (CVE-2007-1748). It bypasses NX/DEP on Windows 2003 SP1/SP2 and targets multiple Windows versions with locale-specific payloads.
This exploit targets a vulnerability in Microsoft DNS Server (CVE-2007-1748) via RPC, allowing remote code execution or denial of service. It supports multiple Windows versions and includes fingerprinting and dynamic port detection.
This exploit targets CVE-2007-1748, a vulnerability in the Windows DNS RPC service. It uses a buffer overflow to execute shellcode that binds a shell to TCP port 4444, providing remote code execution on vulnerable systems.
This is a functional proof-of-concept exploit for CVE-2007-1748, targeting a stack-based buffer overflow in the Windows DNS service's DnssrvQuery function via a crafted RPC request. It includes shellcode for a bind shell on port 4444 and is designed for Windows 2000 Advanced Server.
This Metasploit module exploits a stack buffer overflow in the Microsoft DNS RPC service (CVE-2007-1748) via a long zone name parameter with escaped octal strings. It bypasses NX/DEP on Windows 2003 SP1/SP2 and requires SMB authentication.
This is a functional Metasploit module exploiting a stack buffer overflow in the Microsoft DNS RPC service via a long zone name parameter with escaped octal strings. It includes multiple targets for Windows 2000 and 2003, with techniques to bypass NX/DEP.