full-disclosure - DCOM RPC exploit (dcom.c)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.50L0.0307270915290.7416-100000@cia.zemos.net>
From: booger at unixclan.net (security snot)
Subject: DCOM RPC exploit  (dcom.c)

Sir,

While I fully support the spread of malicious software to the masses, I
disagree with your reasoning.  I don't understand how having any of the
poorly written public exploits for this vulnerability will help in the
securing process in any way.  Unless you mean that the threat of a worm is
more realistic because now hackers, along with security professionals,
both have access to some form of exploits they can use to create a worm
with, and this threat is enough to convince Asian nations to update all
their machines.

Other than that, could you please explain how the distribution of such
materials actually will "help prepare", as you say, for the upcoming worm?

Thanks,

-snot

-----------------------------------------------------------
"Whitehat by day, booger at night - I'm the security snot."
- CISSP / CCNA / A+ Certified - www.unixclan.net/~booger/ -
-----------------------------------------------------------

On Sat, 26 Jul 2003, Blue Boar wrote:

> Chris Paget wrote:
>
> > I know this is the
> > full-disclosure list, but working exploit code for an issue this huge is taking
> > it a bit far, especially less than 2 weeks after the advisory comes out.
>
> I'm aware of at least 7 exploits for this vuln now.  Are you really going
> to complain that you get to see the source for one of them?  If so, that's
> easy enough to fix, just delete the file from your drive.  Yes, this
> exploit will almost certainly be turned into a worm.  I for one would
> rather see the exploit that will be the worm ahead of time, makes it easier
> for everyone to prepare.
>
> 						BB
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>