Exploit For Ms12-020 Rdp Bug Moves To Metasploit

snoopy · Mar 20, 2012

March 20, 2012, 2:08PM
Exploit For Ms12-020 RDP Bug Moves to Metasploit
by Dennis Fisher

As the inquiry into who leaked the proof-of-concept exploit code for the MS12-020 RDP flaw continues, organizations that have not patched their machines yet have a new motivation to do so: A Metasploit module for the vulnerability is now available.

It's been a week now since Microsoft released a patch for the RDP bug and the exploit code that was included with the information the company sent to its partners in MAPP (Microsoft Active Protections Program) was found in an exploit on a Chinese download site shortly thereafter. Luigi Auriemma, the researcher who discovered and reported the vulnerability to Microsoft through the TippingPoint Zero Day Initiative, said that the packet found in the exploit code that leaked was a direct copy of the one he submitted with his bug report.

Officials at ZDI said that they are certain that the code did not leak from their organization. Microsoft officials have said little more than to acknowledge that there seems to be a leak from somewhere within MAPP. The company has not indicated whether that was on their end or from one of the MAPP members.
Click to expand...

https://threatpost.com/en_us/blogs/exploit-ms12-020-rdp-bug-moves-metasploit-032012

Log in or Sign up

Exploit For Ms12-020 Rdp Bug Moves To Metasploit

snoopy Registered Members

Share This Page

Log in or Sign up

Exploit For Ms12-020 Rdp Bug Moves To Metasploit

snoopy Registered Members

Share This Page

Useful Searches