cve/cves/2007/CVE-2007-1748.md

CVE-2007-1748

Description

Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape sequences.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.

ExploitDB

• https://www.exploit-db.com/exploits/16748
• https://www.exploit-db.com/exploits/16366
• https://www.exploit-db.com/exploits/3746
• https://www.exploit-db.com/exploits/3740
• https://www.exploit-db.com/exploits/3737

Metasploit

• https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/dcerpc/ms07_029_msdns_zonename.rb
• https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms07_029_msdns_zonename.rb