Re: Normal Horde Probes and Strange Ones

[Paul Laudanski <zx () castlecops com>]

Good point.  At www.castlecops.com/pirt we have been seeing many sites 
compromised thru Horde to serve up phish.

On Sun, 7 May 2006, Mark Ryan del Moral Talabis wrote:

> We are experiencing a spike in Horde probe attempts the past few days.
> These probes are most likely recon scans preceding an exploit taking
> advantage of the Horde Application Framework vulnerability that allows
> remote code execution via the help code viewer reported the previous
> month. Probably a good idea to patch up in case you haven't!
>
> Full writeup:
> http://www.philippinehoneynet.org/data.php
>
> Cheers!
> Ryan Talabis
>
> --
> The Philippine Honeynet Project
> http://www.philippinehoneynet.org
>
> -------------------------------------------------------------------------
> Sponsored by: Watchfire
>
> The Twelve Most Common Application-level Hack Attacks
> Hackers continue to add billions to the cost of doing business online 
> despite security executives' efforts to prevent malicious attacks. This 
> whitepaper identifies the most common methods of attacks that we have seen, 
> and outlines a guideline for developing secure web applications. 
> Download this whitepaper today!
>
> https://www.watchfire.com/securearea/whitepapers.aspx?id=701300000007t9r
> --------------------------------------------------------------------------

-- 
Paul Laudanski, Microsoft MVP Windows-Security
[de] http://de.castlecops.com
[en] http://castlecops.com
[wiki] http://wiki.castlecops.com
[family] http://cuddlesnkisses.com


-------------------------------------------------------------------------
Sponsored by: Watchfire

The Twelve Most Common Application-level Hack Attacks
Hackers continue to add billions to the cost of doing business online 
despite security executives' efforts to prevent malicious attacks. This 
whitepaper identifies the most common methods of attacks that we have seen, 
and outlines a guideline for developing secure web applications. 
Download this whitepaper today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=701300000007t9r
--------------------------------------------------------------------------