bugtraq - Re: Incorrect reporting of the Bofra/The Register exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Wed, 24 Nov 2004 13:18:43 +0100
From: Florian Laws <florian@...d.s.bawue.de>
To: matt@...ho.com
Cc: bugtraq@...urityfocus.com
Subject: Re: Incorrect reporting of the Bofra/The Register exploit

On Mon, Nov 22, 2004 at 09:02:28PM -0000, matt@...ho.com wrote:
> 
> In response to several regardings the spreading of the Bofra virus, 
> it is not correct. It was not the work of a virus but a carefully 
> planned hack. 

I am surprised nobody seems to care about the load balancer which 
allegedly was compromised to redirect the users to the infected site.

Your site quotes the load balancer in question to be of "type FLB02/CP",
but I can find no information of load balancers of the type on the web.

Do you have some information about this load balancer and the exploit
used to attack it?

Regards,

Florian