Bloodhound/Exploit.133

Bloodhound/Exploit.133 identifica a un método heurísitico para la detección de archivos HTML que explotan la vulnerabilidad del Microsoft Content Management Server (XSS) Cross-Site Scripting.

Sistemas operativos afectados: Windows 95/98/NT/2000/XP y Server 2003

http://www.securityfocus.com/bid/22860/info

La forma empleada de propagación y ejecución de este exploit es visitando páginas web con archivos HTML exprofesamente codificados que contienen instrucciones xss desarrollados en JavaScripts y VBScripts basados en:

• HTML scripting
• HTTP
• Document Object Model  

que permiten la ejecución de códigos malignos y hasta destructivos en forma remota. 

Sistemas afectados:

• Microsoft Content Management Server 2002 SP2
  Microsoft Content Management Server 2002 SP1
  Microsoft Content Management Server 2002
  Microsoft Content Management Server 2001 SP1
  - Microsoft Windows 2000 Advanced Server SP2
  - Microsoft Windows 2000 Advanced Server SP1
  - Microsoft Windows 2000 Advanced Server
  - Microsoft Windows 2000 Datacenter Server SP2
  - Microsoft Windows 2000 Datacenter Server SP1
  - Microsoft Windows 2000 Datacenter Server
  - Microsoft Windows 2000 Professional SP2
  - Microsoft Windows 2000 Professional SP1
  - Microsoft Windows 2000 Professional
  - Microsoft Windows 2000 Server SP2
  - Microsoft Windows 2000 Server SP1
  - Microsoft Windows 2000 Server
  - Microsoft Windows NT Enterprise Server 4.0 SP6a
  - Microsoft Windows NT Enterprise Server 4.0 SP6
  - Microsoft Windows NT Enterprise Server 4.0 SP5
  - Microsoft Windows NT Enterprise Server 4.0 SP4
  - Microsoft Windows NT Enterprise Server 4.0 SP3
  - Microsoft Windows NT Enterprise Server 4.0 SP2
  - Microsoft Windows NT Enterprise Server 4.0 SP1
  - Microsoft Windows NT Enterprise Server 4.0
  - Microsoft Windows NT Server 4.0 SP6a
  - Microsoft Windows NT Server 4.0 SP6
  - Microsoft Windows NT Server 4.0 SP5
  - Microsoft Windows NT Server 4.0 SP4
  - Microsoft Windows NT Server 4.0 SP3
  - Microsoft Windows NT Server 4.0 SP2
  - Microsoft Windows NT Server 4.0 SP1
  - Microsoft Windows NT Server 4.0
  - Microsoft Windows NT Terminal Server 4.0 SP6
  - Microsoft Windows NT Terminal Server 4.0 SP5
  - Microsoft Windows NT Terminal Server 4.0 SP4
  - Microsoft Windows NT Terminal Server 4.0 SP3
  - Microsoft Windows NT Terminal Server 4.0 SP2
  - Microsoft Windows NT Terminal Server 4.0 SP1
  - Microsoft Windows NT Terminal Server 4.0
  - Microsoft Windows NT Workstation 4.0 SP6a
  - Microsoft Windows NT Workstation 4.0 SP6
  - Microsoft Windows NT Workstation 4.0 SP5
  - Microsoft Windows NT Workstation 4.0 SP4
  - Microsoft Windows NT Workstation 4.0 SP3
  - Microsoft Windows NT Workstation 4.0 SP2
  - Microsoft Windows NT Workstation 4.0 SP1
  - Microsoft Windows NT Workstation 4.0
  - Microsoft Windows XP Home
  - Microsoft Windows XP Professional
  Microsoft Content Management Server 2001
  - Microsoft Windows 2000 Advanced Server SP2
  - Microsoft Windows 2000 Advanced Server SP1
  - Microsoft Windows 2000 Advanced Server
  - Microsoft Windows 2000 Datacenter Server SP2
  - Microsoft Windows 2000 Datacenter Server SP1
  - Microsoft Windows 2000 Datacenter Server
  - Microsoft Windows 2000 Professional SP2
  - Microsoft Windows 2000 Professional SP1
  - Microsoft Windows 2000 Professional
  - Microsoft Windows 2000 Server SP2
  - Microsoft Windows 2000 Server SP1
  - Microsoft Windows 2000 Server
  - Microsoft Windows NT Enterprise Server 4.0 SP6a
  - Microsoft Windows NT Enterprise Server 4.0 SP6
  - Microsoft Windows NT Enterprise Server 4.0 SP5
  - Microsoft Windows NT Enterprise Server 4.0 SP4
  - Microsoft Windows NT Enterprise Server 4.0 SP3
  - Microsoft Windows NT Enterprise Server 4.0 SP2
  - Microsoft Windows NT Enterprise Server 4.0 SP1
  - Microsoft Windows NT Enterprise Server 4.0
  - Microsoft Windows NT Server 4.0 SP6a
  - Microsoft Windows NT Server 4.0 SP6
  - Microsoft Windows NT Server 4.0 SP5
  - Microsoft Windows NT Server 4.0 SP4
  - Microsoft Windows NT Server 4.0 SP3
  - Microsoft Windows NT Server 4.0 SP2
  - Microsoft Windows NT Server 4.0 SP1
  - Microsoft Windows NT Server 4.0
  - Microsoft Windows NT Workstation 4.0 SP6a
  - Microsoft Windows NT Workstation 4.0 SP6
  - Microsoft Windows NT Workstation 4.0 SP5
  - Microsoft Windows NT Workstation 4.0 SP4
  - Microsoft Windows NT Workstation 4.0 SP3
  - Microsoft Windows NT Workstation 4.0 SP2
  - Microsoft Windows NT Workstation 4.0 SP1
  - Microsoft Windows NT Workstation 4.0
  - Microsoft Windows XP Home
  - Microsoft Windows XP Professional