Re: Remote exploitation of network scanners?

[Paul Cardon <paul () MOQUIJO COM>]

Lincoln Yeoh wrote:
> Hypothetical scenario:
> A scanner requiring remote input scans a targeted host, looking for replies.
> The targeted host replies with exceptional input causing the scanner to run
> arbitrary code (buffer overflow etc etc), probably with the privileges of
> the user running that scanner.

Real scenario:

This happened to an early version of ISS.  I believe it was discovered
by Mudge or somebody else at the L0pht.

-paul