I have detected MS05-027 on one of the computers using nessus. It is running Windows Sever 2003. How do I exploit this? Can I get a prompt on the remote host?
Plugin ID: 18502
MS05-027: Vulnerability in SMB Could Allow Remote Code Execution (896422) (uncredentialed check)
Synopsis
Arbitrary code can be executed on the remote host due to a flaw in the SMB implementation.
List of Hosts
<host>
Description
The remote version of Windows contains a flaw in the Server Message
Block (SMB) implementation that may allow an attacker to execute
arbitrary code on the remote host.
An attacker does not need to be authenticated to exploit this flaw.
Solution
Microsoft has released a set of patches for Windows 2000, XP and
2003 :
http://www.microsoft.com/technet/security/bulletin/ms05-027.mspxRisk Factor
Critical/ CVSS Base Score: 10.0
(CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVE
CVE-2005-1206
Bugtraq ID
13942
Other references
OSVDB:17308
MSFT:MS05-027
Vulnerability publication date: 2005/06/15
Patch publication date: 2005/06/14
Plugin publication date: 2005/06/16
Plugin last modification date: 2011/08/08
Ease of exploitability: Exploits are available
Exploitable with: Core Impact
GCIH - GIAC Certified Incident Handler : Passed my GCIH
