CVE-2007-3039
Microsoft Message Queuing - Stack-based Buffer Overflow via RPC Opnum 0x06
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2007-3039.
PoCs published by Metasploit, Marcin Kozlowski, Andres Tarasco, including Metasploit module exploits/windows/dcerpc/ms07_065_msmq.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in the Microsoft Message Queueing (MSMQ) service via a maliciously crafted DNS name path. It leverages DCERPC to trigger the vulnerability and execute arbitrary code with elevated privileges.
Description
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.
Exploits (5)
This exploit targets a stack buffer overflow in the Microsoft Message Queueing (MSMQ) service via a maliciously crafted DNS name path. It leverages DCERPC to trigger the vulnerability and execute arbitrary code with elevated privileges.
This exploit targets CVE-2007-3039, a buffer overflow vulnerability in the Windows Message Queuing Service (MS07-065). It crafts a malicious RPC request to trigger a stack-based buffer overflow, leading to remote code execution via embedded shellcode.
This is a working exploit for CVE-2007-3039, targeting a buffer overflow in Microsoft Message Queue (MSMQ) via RPC. It achieves remote code execution by exploiting the QMCreateObjectInternal() function, tested against Windows 2000 Advanced Server SP4.
This exploit targets CVE-2007-3039, a buffer overflow vulnerability in the Windows Message Queuing Service (MS07-065). It sends a maliciously crafted RPC request to trigger the overflow and execute shellcode, resulting in a bind shell on port 1154.
This Metasploit module exploits a stack buffer overflow in the Microsoft Message Queueing (MSMQ) service via a maliciously crafted DNS name path in an RPC request. It leverages SEH overwrites to achieve remote code execution on vulnerable Windows 2000 Server systems.