A whole new family of exploits




Posts: 15

Joined: Thu Mar 22, 2007 7:04 am

Post Wed Jul 25, 2007 4:56 pm

A whole new family of exploits

This article indicates that there may be a whole new family of exploits about to hit the streets.


The poc is going to be shown next week at the Black Hat Security Briefings in Las Vegas - anyone on here going ?.

The annoying thing is that the exploit is built around a vulnerability in IIS5 that was notified to MS in Dec 2005 - how slack is that !


User avatar

Jr. Member
Jr. Member

Posts: 61

Joined: Mon Jan 15, 2007 8:46 am

Location: India

Post Wed Jul 25, 2007 5:32 pm

Re: A whole new family of exploits

Well the threat is already been patched. Inge Henriksen had reported the vulnerability.

Click here to read his blog.

All my life I wanted a computer...
Now I want my life back !


Post Thu Jul 26, 2007 4:14 am

Re: A whole new family of exploits

There's no indication that these exploits are in the wild, but once hackers on both sides get their heads around this there's likely to be a slew of them. This harkens back to the notion that format string vulnerabilities were unexploitable.

Rules of the Internet #34a - If it exists there a exploit for it. No Exceptions.


Return to Network Pen Testing

Who is online

Users browsing this forum: No registered users and 1 guest

Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software