[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[TZO-042006] Insecure Auto-Update and File execution (2)
- To: bugtraq@xxxxxxxxxxxxxxxxx, cert@xxxxxxxx, dab@xxxxxxxxx, <full-disclosure@xxxxxxxxxxxxxxxxx>, <ju@xxxxxxxxx>, <news@xxxxxxxx>, <news@xxxxxxxxxxx>, <news@xxxxxxxxxxxxxx>, <submission@xxxxxxxxxxxxxxx>
- Subject: [TZO-042006] Insecure Auto-Update and File execution (2)
- From: Thierry Zoller <Thierry@xxxxxxxxx>
- Date: Thu, 11 May 2006 16:21:39 +0200
Dear List,
As my advisory has been a bit unclear in certain regards, I would like
to clarify a few questions I have received briefly :
- The Auto update problem with Zango Adware remains, there was no fix.
- The Adware component is distributed by over 10.000 affilates
everyday and I expect it to be installed on millions of workstations (IMO).
- If you compromise (or alter) a DNS server this gives immediate access to
internal client machines.
The impact as citing Kevin F. is : "Dns server pwnage and then mass client
ownage"
--
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45 2E57 28B3 75DD 0AC6 F1C7