share.mod bug could be used for an exploit

GodOfSuicide · Post by **GodOfSuicide** » Tue Feb 10, 2004 6:02 am

A tricky attacker can gain the control over (almost) any eggdrop botnet. the bug rely in the fact that every legitimate bot can gain share status even if it is not marked to share with someone

check http://www.securityfocus.com/archive/1/ ... 04-02-13/0 and apply the included patch

Dedan · Post by **Dedan** » Thu Feb 12, 2004 9:30 pm

are stand alone bots imune?

bobjuh · Post by **bobjuh** » Fri Feb 13, 2004 3:46 am

http://forum.egghelp.org/viewtopic.php?t=6813

There is already a topic open about die share.mod bug

GodOfSuicide · Post by **GodOfSuicide** » Fri Feb 13, 2004 6:06 am

bobjuh wrote:http://forum.egghelp.org/viewtopic.php?t=6813

There is already a topic open about die share.mod bug

in fact, this one was open befor the other one

spock · Post by **spock** » Fri Feb 13, 2004 10:16 am

bobjuh · Post by **bobjuh** » Sun Feb 15, 2004 8:50 am

No The other one was earlyer

This post

Posted: Tue Feb 10, 2004 12:02 pm Post subject: share.mod bug could be used for an exploit

and the other

Posted: Tue Feb 10, 2004 4:41 am Post subject: supposed 1.6.x eggdrop exploit posted on bugtraq