Great Black Walruses of the Deep

[Dave Aitel <dave () immunityinc com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Some bugs are born and die in a flash, and some bugs last forever and
then disappear into the deep like a great walrus. Either way, why are
people owning universities with really good 0day from IP addresses in
Taiwan?

I guess we'll never know. This MSDNS bug is one of the few MSRPC bugs
that can be found with a MSRPC fuzzer of the sort I demoed in Beijing
at XCon. It's a rare animal though. Fuzzing is not a good way to find
MSRPC bugs these days.

Along with SPIKE 3.0, we released our MSDNS MSRPC exploit today into
Partners - exploits Windows 2003 and 2000 reliably, and for bonus
points, defeats Wehnus's DLL randomization.

Anyways, it's Saturday, I'm in Newark International (motto: "This is
not the gate you're looking for") on my way to the great white north
to find another walrus or two.

- -dave
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGIV6ZtehAhL0gheoRAgtJAJ4tI3soycIRcWySUdAizZN53E8heQCdEj/Y
8YwG2wqacqrGapWYd/e+E9k=
=Fi2x
-----END PGP SIGNATURE-----

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave