full-disclosure - EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <275148593.20040210212154@tolna.net>
From: pappgeza at tolna.net (Papp Geza)
Subject: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption

Hello Maiffret

2004. febru?r 10., 19:30:47, ?rtad:
Hello,

Yes - this is two worm, that use the Mydoom backdoor`s. This is not
"binaris" and not is .zip archive.

This twoo worm are hexa. and is padked to UPX. My attachement picture
from worm W32/Doomjuice.worm.a,aliases: W32.HLLW.Doomjuice, WORM_DOOMJUICE.A,
Win32.Doomjuice.A, Worm.Win32.Doomjuice

>From second worm i`have not pitures, but description...

The worm is comlex. W32/Deadhat-A
Aliases :
Win32.Vesser.A, W32.HLLW.Deadhat, Vesser, W32/Vesser.worm.a

-- 
?dv?zlettel,
  Geysap                             mailto:pappgeza@...na.net

www.gyik.com
"VIRUS CORE TEAM"
====================================
Fiat justitia, pereat mundus!
------------------------------------
we protect your digital worlds... 
====================================

-- 
?dv?zlettel,
  Geysap                             mailto:pappgeza@...na.net

www.gyik.com
"VIRUS CORE TEAM"
====================================
Fiat justitia, pereat mundus!
------------------------------------
we protect your digital worlds... 
====================================