The Yin and the Yang: A Sordid Tale of Information Security, OR DCOM, Netcat, and a Live Response, OH MY!

The exploit that this paper will cover is one that has been in use for some time - the buffer overrun vulnerability that was discovered in the majority of Microsoft's Operating Systems' RPC DCOM handling. This vulnerability was found in July 2003 by a group known as LSD, or Last Stage of Delirium...