July 16, 2006

Updated Undercover Exploit List

Well, it looks like the latest Powerpoint exploit gets added to my list of "undercover vulnerabilities." That leaves me with the following:

New Addition (11 total since 1988):

Old List:

  • 12/29/05 - WMF. (public information)
  • 2/7/05 - Mailman directory traversal. (credit: ilja van Sprundel)
  • 11/16/04 - Twikis search.pm. (credit: ilja van Sprundel)
  • 12/04/03 - Rsync. (credit: David Goldsmith, Matasano)
  • 11/20/03 - do_brk() overflow. (credit: David Goldsmith, Matasano)
  • 3/18/03 - WebDAV. (publicly available information)
  • 9/3/98 - SunOS ToolTalk. (credit: TQBF, who never got the beer...)
  • 4/24/96 - rpc.statd. (double credit: TQBF - thanks again.)
  • 11/2/88 - Sendmail (credit: David Goldsmith, Matasano)
  • 11/2/88 - Fingerd (credit: David Goldsmith, Matasano)

Honorable Mention (which don't quite make the list because the vulnerability information was not discovered due to an active exploit):

  • RealServer ../../../ overflow
  • Any of the Immunity VSC releases (Mac OS X Kernel Local, anyone?)
  • Samba bug that HDM got hacked with... [this may get elevated, I am not sure]
  • [Credits: Dave Aitel and Anton Chuvakin for the information]
Jul 16, 2006 9:20:55 PM | Threat Management

1 Comment

Health News

I can't believe how much of this I just wasn't aware of. Thank you for bringing more information to this topic for me. I'm truly grateful and really impressed.

Posted by: Health News | March 16, 2011 at 06:25 AM

The comments to this entry are closed.

NEXT POST
Nothin' Doing on the Failure of Two Factor We are such a tolerant bunch, security professionals. The most recent example of this is the Citibank man-in-the-middle phish attack (the Jonah?). After a grand total of ONE known example of a Jonah amidst countless thousands (tens-of-thousands?) other phish attempts, two factor authentication now "does nothing" against phishing and is a "failure". Methinks my two colleagues overindulge their fearless prognostication (really? a MITM phish? here's two for you, Anton, and make sure you keep a spot open for me - I'm sure I'll join the group sooner or later ;-)) to reduce a technique that is currently about 99.9% effective...
PREVIOUS POST
Someone Deserves a Slap on the Wrist I am shocked and dismayed that somebody had the gall to distribute an undercover exploit against Powerpoint a day after (or same day as?) Microsoft Tuesday's release of 7 patches for 18 new vulnerabilities that did not include this one. Somebody deep inside the Internet tubes at "blackhat central" apparently didn't get the word that they are only allowed to exploit known vulnerabilities. What's worse is there were plenty of fresh ones to pick from. So, now we are in a situation where we are applying seven new patches, none of which protect against the freshest exploit... hmm, good use...

I'm a guy with some ideas and opinions.

The Typepad Team

Search

Recent Comments