Re: Distributed spam-based DoS in progress

[Rohan Amin <rohan () rohanamin com>]

> a denial of service. It seems that there are very few people out there who
> have seen this but I'm sure it's not far off from becoming more prevalent.

I was just involved in helping handle an incident where someone had
installed a rogue SMTP 'engine' by exploiting the Gallery web
application (known vulnerability).  The SMTP engine connected to a
server in Russia, downloaded a forged header, body and 5000 emails
(and repeated).  It then sent the emails.  Each fetch retreived the
next batch of emails (in alphabetical order by domain).

Nasty little thing!

Regards,

Rohan


----------------------------------------------------------------------------

Do you know the base address of the Global Offset Table (GOT) on a Solaris 8
box?
CORE IMPACT does.
www.securityfocus.com/core