Immunity, Inc.
Name msimpersonate
CVE CVE-2004-0894
Exploit Pack CANVAS
Descriptionmsimpersonate (MS04-044)
NotesCVE Name: CVE-2004-0894
VENDOR: Microsoft
MSADV: MS04-044
Discovered By: Cesar Cerrudo
MSRC: http://www.microsoft.com/technet/security/bulletin/MS04-044.mspx
CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0894
Usage: Will attempt to load a system token - use
getthreadsinfo to determine if this works.
Then you should be able to change into \\127.0.0.1\C$, etc
Sometimes it's hard to tell which token is the system token...

CVSS: 7.2

Learn more about the CANVAS Exploit Pack here: CANVAS