CVE-2020-1350 PoC — Microsoft Windows DNS Server 输入验证错误漏洞

Source

https://github.com/jmaddington/dRMM-CVE-2020-1350-response

Associated Vulnerability

Title: Microsoft Windows DNS Server 输入验证错误漏洞 (CVE-2020-1350)
Description:A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

Description

Windows registry mitigation response to CVE-2020-1350

Readme

# Overview

Microsoft announced CVE-2020-1350 on July 14 2020. This vulnerability in Windows DNS server goes back to Server 2003
and is broadly thought to be wormable.

This script follows the intructions from KB456509 (<https://support.microsoft.com/en-us/help/4569509/windows-dns-server-remote-code-execution-vulnerability>) to mitigate the issues without rebooting the server.

For Datto RMM users, you can import aem-component.cpt into the RMM. For other RMM users, the script simply needs command.bat and TcpRecievePacketSize.reg to work.

## Caveats
This script is only a few hours old and is not thoroughly tested. It based on the best information we have available from Microsoft right now.

Use at your own risk.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →