s0h: Remote/Local exploit and patch for regedit.exe.

Hi,

The april 17, 2002, an strange exploit about a new vulnerability of regedit.exe was posted on the NTBugtraq list (http://sv98.s0h.cc/~threat/source/TrapReg.c).

This exploit can trapped an local key, that allow users to browse our register localy or _remotely_.

Today, the Monday 28 April 2003, ThreaT <ThreaT@s0h.cc> from the Skin Of Humanity released the patch related to the exploit. This patch was released BEFORE Microsoft Corporation(c)(r)(tm).

Please enjoy the source code at http://www.s0h.cc/~threat/goodies/regpatch/source_regpatch.zip Executable patch : http://www.s0h.cc/~threat/goodies/regpatch/regpatch.exe Article (french, will be translated in few hours) : http://sv98.s0h.cc/~threat/goodies/regpatch/

Actualy this patch was tested on Windows SERVER/PRO 2000 SP2 and SP3 and regedit.exe version 5.0.2134.1 we don't sure that it's work for English version...

Please note :

        The Skin Of Humanity Group protect all its members.if a problem occurs concerning this diffusion, the author is not responsible, the leader of the group is in all the responsible case of cause. Since the diffusion does not come from the creator but from the group. Thank you.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Best regards and respect,
Descript. <descript@s0h.cc>
Skin Of Humanity
http://s0h.cc/ Received on Mon Apr 28 23:18:18 2003