Download

Description

"Microsoft UPnP MS05-039 Vulnerability Detection Utility"

MS05-039 Scan 1.0 is a Windows based detection and analysis utility that can quickly and accurately identify Microsoft operating systems that are vulnerable to the multiple buffer Overflow vulnerabilities released in the MS05-039 bulletin.

MS05-039 Scan is intended for use by enterprise system and network administrators as a fast and reliable utility for identifying at risk Microsoft systems in a passive manner. This tool is non-abrasive in nature and may be run in production environments during production hours.

Limitations of the tool:
The scanner is limited to 10 outgoing connections on WIndows XP SP2. This scanning limitation is caused by SP2. All other platforms will have 64 concurrent scanning Threads running.

If you have anti-virus running it *may* Detect this tool as an exploit. This tool *does NOT* exploit the vulnerabilty it simply determines if the machine is vulnerable or not.

Vulnerability Information:
There is a remotely exploitable vulnerability in the Plug and Play (PnP) RPC interface in Microsoft Windows.

Using a null session, an Attacker could make an RPC request to the PnP interface on a Microsoft Windows system that could potentially execute arbitrary code.

This Foundstone check detects the absence of the patch by attempting to trigger the vulnerability in a nonintrusive manner over RPC. you can free download MS05-039 Scan 1.0 now.

Keywords

Related Software

• Temperature Scan
  
• n to PD
  it is well designed, easy to use and makes scanning your paper documents to PDF.
• CredDigger
  A tool that attempts to gather data to assist with penetration
• 
  A scanner for the infamous Back Orifice program.
• fileWATCH
  A file change monitor. Used with BlackICE Defender.
• HackPack
  Foundstone HackPack is a tool designed to aid security
• 
  Show information about Windows. Reveal passwords etc.
• Galleta
  A Internet Explorer Cookie Forensic Analysis Tool
• 
  Microsoft UPnP MS05-039 Vulnerability Detection Utility
• 
  NTLast is specifically targeted for serious security and IIS administration.
• Carbonite
  Incident Response vs. Loadable Kernel Module Rootkits
• FSCrack
  provide a graphical user interface (GUI) for access to most of JtR’s functions
• 
  Traceroute and Whois program.
• Hacme Shipping
  Foundstone Hacme Shipping is a web-based shipping application
• Foundstone CredDigger
  Foundstone CredDigger is a tool that attempts to gather data to assist
• Attacker
  A TCP/UDP port listener.
• IPv4Trace
  IPv4 fragment reassembly implementation.
• 
  SNScan allows for the scanning of SNMP specific ports
• 
  An Internet Explorer activity forensic analysis tool.
• 
  A scriptable, server stress testing tool.
• RPCScan
  A utility that can quickly and accurately identify Microsoft operating systems
• 
  UDP packet sender utility.
• SiteScope
  Foundstone�s SiteScope creates a site map
• Fpipe
  FPipe is a source port forwarder/redirector.
• MessengerScan
  Vulnerability Detection Utility with Advanced Immediate Protection Capability!
• CodeScout
  Foundstone CodeScout is a free tool
• 
  An update of the highly popular Windows port scanning tool, SuperScan.
• 
  A Recycle Bin Forensic Analysis Tool.
• Hacme Books
  Foundstone Hacme Books is a learning platform for secure software development
• Fport
  Identify unknown open ports and their associated applications
• SiteDigger
  SiteDigger 2.0 searches Google’s cache to look for vulnerabilities
• 
  Finds Ascii, Unicode and Resource strings in a file.
• 
  Remote Task Scheduler scanner
• Vision
  Vision is a host based Forensic Utility
• 
  Cisco IOS IPv4 Remote Denial of Service Vulnerability Detection Utility
• Toolk
  Tools to help examine NTFS for unauthorized activity.
• 
  A small, quick TCP service stress test tool.
• Hacme Bank
  Hacme Bank is designed to teach application developers
• CookieDigger
  CookieDigger helps identify weak cookie generation
• 
  A network admin utility for remotely detecting the most common DDoS programs.
• WSDigger
  WSDigger is a free open source tool
• SSLDigger
  SSLDigger v1.02 is a tool to assess the strength of SSL servers
• 
  Command line port scanner.
• 
  Mydoom worm scanner
• PatchIt
  A binary file byte-patching program.