Re: Distributed spam-based DoS in progress

> a denial of service. It seems that there are very few people out there who

I was just involved in helping handle an incident where someone had installed a rogue SMTP 'engine' by exploiting the Gallery web application (known vulnerability). The SMTP engine connected to a server in Russia, downloaded a forged header, body and 5000 emails (and repeated). It then sent the emails. Each fetch retreived the next batch of emails (in alphabetical order by domain).

Nasty little thing!

Regards,

Rohan

Do you know the base address of the Global Offset Table (GOT) on a Solaris 8 box?
CORE IMPACT does.
www.securityfocus.com/core Received on Thu Feb 20 10:47:29 2003