News for hackers. Stuff that matters.

lontivero

lontivero on Hacker News

Re:Remote Kernel Code Execution Via HTTP Request In IIS On Windows on Wednesday April 15, 2015 @07:30PM (#9384949)
If I understood well, the HTTP request with the Range header is just a way to CHECK for the vulnerability and it is not THE vulnerability.

The vulnerability allows execute code remotly under the Syetem account.

Am I wrong?