> a denial of service. It seems that there are very few people out there who > have seen this but I'm sure it's not far off from becoming more prevalent. I was just involved in helping handle an incident where someone had installed a rogue SMTP 'engine' by exploiting the Gallery web application (known vulnerability). The SMTP engine connected to a server in Russia, downloaded a forged header, body and 5000 emails (and repeated). It then sent the emails. Each fetch retreived the next batch of emails (in alphabetical order by domain). Nasty little thing! Regards, Rohan ---------------------------------------------------------------------------- Do you know the base address of the Global Offset Table (GOT) on a Solaris 8 box? CORE IMPACT does. www.securityfocus.com/core
This archive was generated by hypermail 2b30 : Thu Feb 20 2003 - 07:47:09 PST