jetlib.sec » Full Disclosure » February 14, 2012

Feeds

133099 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Full Disclosure

• February 14, 2012
• 

  [CAL-2011-0071]Adobe Shockwave Player Parsing cupt atom heap overflow

  Posted: February 14th, 2012, 5:02pm PST

  Tags:   

  Posted by Code Audit Labs on Feb 14

  [CAL-2011-0071]Adobe Shockwave Player Parsing cupt atom heap overflow
  
  Discover: instruder of code audit labs of vulnhunt.com
  CAL: CAL-2011-0071
  CVE: CVE-2012-0758
  
  http://blog.vulnhunt.com/index.php/2012/02/15/cal-2011-0071_adobe-shockwave-player-parsing-cupt-atom-heap-overflow/
  
  adobe security bulletins
  http://www.adobe.com/support/security/bulletins/apsb12-02.html
  
  1 Affected Products
  =================
  adobe shockwave 11.6.3.633
  adobe...
  
• 

  [CAL-2011-0055]Adobe Shockwave Player Parsing block_cout memory corruption vulnerability

  Posted: February 14th, 2012, 5:00pm PST

  Tags:   

  Posted by Code Audit Labs on Feb 14

  [CAL-2011-0055]Adobe Shockwave Player Parsing block_cout memory
  corruption vulnerability
  
  Discover: instruder of code audit labs of vulnhunt.com
  CAL: CAL-2011-0055
  CVE: CVE-2012-0759
  
  http://blog.vulnhunt.com/index.php/2012/02/15/cal-2011-0055_adobe-shockwave-player-parsing-block_cout-memory-corruption-vulnerability/
  
  adobe security bulletins
  http://www.adobe.com/support/security/bulletins/apsb12-02.html
  
  1 Affected Products
  =================...
  
• 

  Re: Arbitrary DDoS PoC

  Posted: February 14th, 2012, 3:46pm PST

  Tags:   

  Posted by Sanguinarious Rose on Feb 14

  Now, I had to do it. I took a look at his other projects (I know, I
  know..., it has begun)
  
  https://github.com/lfamorim/IntensiveDoS
  
  If you thought the python code was bad... It doesn't even do anything
  remotely effective. Now, pthreads has a cap of around 200 max threads
  (depends on compile options, platform, etc.) a single process can do.
  If this was even remotely "Intensive" it would be using async sockets
  which you can at...
  
• 

  Re: Arbitrary DDoS PoC

  Posted: February 14th, 2012, 1:38pm PST

  Tags:   

  Posted by Laurelai on Feb 14

  You know its bad when even Sanguinarious calls you a troll.
  
• 

  Re: Arbitrary DDoS PoC

  Posted: February 14th, 2012, 1:30pm PST

  Tags:   

  Posted by Lucas Fernando Amorim on Feb 14

  I could argue that an attack targeted at a service, especially HTTP, is
  not measured by the band, but the requests, especially the heavier,
  could argue that a technique is the most inherent characteristic of
  multiple sources of traffic and still relying on trust. I could still
  say that is an implementation that relates only to say - Look, it
  exists!, I could still prolong explaining about overheads, and using
  about the same time many sites...
  
• 

  Re: Arbitrary DDoS PoC

  Posted: February 14th, 2012, 1:28pm PST

  Tags:   

  Posted by Terrence on Feb 14

  Haha lets all ddos through tor.....and proxies...thats how we speed shit up.
  
• 

  Re: Arbitrary DDoS PoC

  Posted: February 14th, 2012, 1:27pm PST

  Tags:   

  Posted by Terrence on Feb 14

  Just by glancing at the tool I would bet that this tool has the http
  headers misordered too. Its all good this tool would not be a very
  effective dos tool but keep up the good work and nice choice of the
  starfox quote.
  
• 

  Re: Arbitrary DDoS PoC

  Posted: February 14th, 2012, 12:58pm PST

  Tags:   

  Posted by Sanguinarious Rose on Feb 14

  I do not understand why you are wasting time on an obvious troll to
  downright, and I don't normally call people names but he well deserves
  it, a retard. I think I ironically illustrated the fundamental flaw in
  that you can't possibly generate more bandwidth by using proxies for
  the python code provided due to it violates the laws of physics
  (literally). In fact, if we want to be technical, we could say it is
  less effective due to the...
  
• 

  Re: New DNS exploit - Ghost Domains

  Posted: February 14th, 2012, 11:53am PST

  Tags:   

  Posted by Adam Behnke on Feb 14

  Good point, well said. Should have called it a technique. Will do so in other postings elsewhere.
  
  -----Original Message-----
  From: InterN0T Advisories [mailto:advisories () intern0t net]
  Sent: Tuesday, February 14, 2012 1:05 PM
  To: Adam Behnke
  Cc: full-disclosure () lists grok org uk
  Subject: Re: [Full-disclosure] New DNS exploit - Ghost Domains
  
  To question:
  
  I don't get it, where's the vulnerability (or exploit)? DNS is supposed to...
  
• 

  Re: New DNS exploit - Ghost Domains

  Posted: February 14th, 2012, 11:04am PST

  Tags:   

  Posted by InterN0T Advisories on Feb 14

  To question:
  
  I don't get it, where's the vulnerability (or exploit)? DNS is supposed to
  work this way, and because some name-servers like OpenDNS use longer TTL
  values, it doesn't necessarily mean that it's a vulnerability or an
  exploit. It's like saying because an IPv4-address is leased via DHCP for a
  week, it's a vulnerability too even if the target host isn't using it.
  
  I'd rather say it's a...
  
• 

  Re: Arbitrary DDoS PoC

  Posted: February 14th, 2012, 9:19am PST

  Tags:   

  Posted by Gage Bystrom on Feb 14

  If the design is broken than the implementation is broken. Have you READ
  your own source code? Do you understand what its actually doing? Rhetorical
  questions of course but still.
  
  Your poc calls curl multiple times via a list of proxies. No more, no less.
  If you are going to claim that such a thing is an effective general
  technique YOU have to back up that claim, not me or anyone else on this
  list. I never bothered running it because anyone who...
  
• 

  New DNS exploit - Ghost Domains

  Posted: February 14th, 2012, 9:09am PST

  Tags:   

  Posted by Adam Behnke on Feb 14

  To explain:
  
  Whenever there is a query for a domain which is not in the resolver's cache,
  the process happens by traversing through the entire DNS hierarchy from the
  root servers to the top-level domain (e.g., .com). The top-level domain
  (TLD) then gives us the information about the name server that has been
  delegated the responsibility of the domain whose IP address we are looking
  for. We then get the information about that domain from its...
  
• 

  [Spanish] - Webinario gratuito - Desarrollo de Exploits

  Posted: February 14th, 2012, 7:41am PST

  Tags:   

  Posted by runlvl on Feb 14

  Fecha y hora: Jueves, Febrero 16 2012 - 19:00 PM ( Hora Argentina GMT - 3:00 )
  
  En el webinario veremos de forma practica como desarrollar exploits,
  casos actuales en aplicaciones reales,
  desbordamiento de buffers, debugging en tiempo real y ejercicios.
  
  Herramientas que usaremos:
  Exploit Pack - http://exploitpack.com
  Python - http://python.org
  GDB - http://www.gnu.org/software/gdb/
  
  Orador: Juan Sacco
  Software a utilizar: Exploit Pack...
  
• 

  [ MDVSA-2012:019 ] apr

  Posted: February 14th, 2012, 5:43am PST

  Tags:   

  Posted by security on Feb 14

  _______________________________________________________________________
  
  Mandriva Linux Security Advisory MDVSA-2012:019
  http://www.mandriva.com/security/
  _______________________________________________________________________
  
  Package : apr
  Date : February 14, 2012
  Affected: 2010.1, 2011., Enterprise Server 5.0
  _______________________________________________________________________
  
  Problem Description:
  
  A...