Re: NT Compromise -- Update -- SRC PORT: 53 traffic

From: Joep Gommers (joepgommersat_private)
Date: Tue Dec 25 2001 - 08:22:39 PST

Next message: stefmitat_private: "Re: Request For Hack !"

Previous message: Nexus: "Request For Hack !"
In reply to: Loki: "NT Compromise -- Update -- SRC PORT: 53 traffic"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

http://www.securiteam.com/exploits/5YP0E1F0KU.html

Joep Gommers

----- Original Message -----
From: "Loki" <lokiat_private>
To: <incidentsat_private>
Sent: Monday, December 24, 2001 8:31 PM
Subject: NT Compromise -- Update -- SRC PORT: 53 traffic


> I should mention that the packets were flooding our DNS server, enough
> traffic to saturate and bring down our T1. Please note that again, the
> port 53 was not the DST port, rather, the SRC port of each packet.
>
>
> --
>
>
> ============================================================
> Loki
> Founder, Chief Research Scientist
> Fate Research Labs
> United States VPN Division
> ------------------------------------------------------------
> [w] http://www.fatelabs.com
> [e] lokiat_private
> [p] +1 412 303 3115
> ------------------------------------------------------------
> "Ipsa Scientia Potestas Est" Knowledge itself is power.
> ============================================================
>
>
> --------------------------------------------------------------------------
--
> This list is provided by the SecurityFocus ARIS analyzer service.
> For more information on this free incident handling, management
> and tracking system please see: http://aris.securityfocus.com
>



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: stefmitat_private: "Re: Request For Hack !"
Previous message: Nexus: "Request For Hack !"
In reply to: Loki: "NT Compromise -- Update -- SRC PORT: 53 traffic"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Dec 25 2001 - 14:19:48 PST