** HEADS UP ** NEW WINDOWS SSDP AND UPnP exploit

[ByTeWrangler]

Greeting's

There is a new windows vulnerability found :


1. General overview :

http://www.frsirt.com/english/advisories/2006/0417


2. Proof of concept :

http://www.frsirt.com/exploits/20060202.SrvCheck.c.php


3. Technical detail paper (good read) :

http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf



This vulnerability is regarded as MODERATE and ** CANNOT ** be exploited REMOTELY.
No patch from microsoft till now.

[SirDice]

Nice....

If I read this correctly it's got nothing to do with SSDP and/or uPnP as a service but it's related to the access controls on starting, stopping and changing the actual executable that gets run..

It could also be service XX installed by vendor YY that has these same access control mistakes..