Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Proof of Concept binaries for MS08-067 targeting english Win

by Marianna Schmudlach Oct 31, 2008 1:30AM PDT

Proof of Concept binaries for MS08-067 targeting english Windows OS's

Friday, October 31, 2008

We are seeing the first Proof of Concept binaries that target the MS08-067 vulnerability on the following English localized systems:

Windows XP Service Pack 2
Windows XP Service Pack 3
Windows 2003 Service Pack 2

The payload is encrypted as normal. It's function is to add the guest account to the administrators group, thus allowing unlimited access to the machine. We detect the binaries as follows:

Backdoor:W32/Agent.DIN
Backdoor:W32/Agent.DIO
Backdoor:W32/Agent.DIP

We'll continue to keep an eye on the events.

http://www.f-secure.com/weblog/