Bugtraq mailing list archives
RE: [inbox] W2K source "leaked"?
From: "Curt Purdy" <purdy () tecman com>
Date: Fri, 13 Feb 2004 12:39:03 -0600
Gadi Evron wrote:
I never believed in 0-days.
<snip>
but now... I don't know.
I can assure you 0-days do and have existed for a long time. In the past the true l33t h4x0rs would turn their creations over to the kiddies when they came up with something better to use. Today they do it when a patch has been released or is immanent. In fact today, they are often nicely pre-compiled. I had a copy of dcom.exe several days prior to MS releasing the RPC patch. Within a day of the release, it was all over irc and even some lists. I don't think many people realize how many tens or even hundreds of thousands of zombies were created by all the kiddies typeing dcom.exe as fast as their little fingers could go. MSBlast was likely the best thing that could have happened to force patching before the boxes were hijacked and patched by an intruder. Curt Purdy CISSP, GSEC, MCSE+I, CNE, CCDA Information Security Engineer DP Solutions ---------------------------------------- If you spend more on coffee than on IT security, you will be hacked. What's more, you deserve to be hacked. -- White House cybersecurity adviser Richard Clarke
Current thread:
- W2K source "leaked"? Gadi Evron (Feb 12)
- Re: W2K source "leaked"? Zhenkai Liang (Feb 13)
- RE: [inbox] W2K source "leaked"? Curt Purdy (Feb 16)
- <Possible follow-ups>
- RE: W2K source "leaked"? tlarholm (Feb 12)
- Re: W2K source "leaked"? Víctor (Feb 13)
- Re: W2K source "leaked"? Víctor (Feb 13)
- Re: W2K source "leaked"? Byron Copeland (Feb 16)
- RE: W2K source "leaked"? Drew Copley (Feb 13)
- Re: W2K source "leaked"? telec (Feb 13)
- RE: W2K source "leaked"? tlarholm (Feb 13)
- RE: W2K source "leaked"? LordInfidel (Feb 16)
- Re: W2K source "leaked"? Ho Chaw Ming (Feb 16)
- Re: [work] Re: W2K source "leaked"? opticfiber (Feb 17)
- Re: W2K source "leaked"? Ho Chaw Ming (Feb 16)