Sep 17 2003
As I foresaw …
Well, an exploit for last weeks new RPC/DCOM vulnerability has been released. Apparently a Chinese website has made a tool available for download that takes advantage of the vulnerability to give hackers control over remote desktops. Read the article from Security Focus The time between a vulnerability being discovered and the exploit being released is shrinking at an alarming rate!
On a slightly different note, I’m waiting to hear more about the OpenSSH vulnerability revealed yesterday. There is apparently an exploit circulating in the wild, but no one I know of has seen it yet. Don’t be the first to get your own copy of it the hard way.