NetWin DMail Server Multiple Remote Vulnerabilities

The installation of NetWin DMail on the remote host suffers from an authentication bypass vulnerability in its mailing list server component, DList, and a format string vulnerability in the SMTP server component, DSmtp. An attacker can exploit the first to reveal potentially sensitive log...

Korgo Worm Detection

Nessus found that TCP ports 113 and 3067 are open. The Korgo worm is known to open a backdoor on these ports. It propagates by exploiting the LSASS vulnerability on TCP port 445 as described in Microsoft Security Bulletin MS04-011 Note that Nessus did not try to talk to the backdoor, so this migh...

UDP DoS attack in Win2k via IKE

UDP DoS in Win2k via IKE PROBLEM ======= A DoS attack can be carried out on Win2k machines running IKE internet key exchange by sending flooding IKE with UDP packets. This can cause the machine to lock up and render 99 of the CPU. EXPLOIT ====== Connect to port 500 IKE of the Win2k box and start...