full-disclosure - DCOM RPC exploit (dcom.c)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3F2339E2.7090705@thievco.com>
From: BlueBoar at thievco.com (Blue Boar)
Subject: DCOM RPC exploit  (dcom.c)

Chris Paget wrote:

> I know this is the
> full-disclosure list, but working exploit code for an issue this huge is taking
> it a bit far, especially less than 2 weeks after the advisory comes out.

I'm aware of at least 7 exploits for this vuln now.  Are you really going 
to complain that you get to see the source for one of them?  If so, that's 
easy enough to fix, just delete the file from your drive.  Yes, this 
exploit will almost certainly be turned into a worm.  I for one would 
rather see the exploit that will be the worm ahead of time, makes it easier 
for everyone to prepare.

						BB