Notable that the ISP apparently took no (or ineffective) mitigating action to deal with this vulnerability, reportedly for over two weeks after private disclosure, and did not respond to the report's authors.
--Lauren-- NNSquad Moderator ----- Forwarded message from Arturo 'Buanzo' Busleiman <[email protected]> ----- Date: Mon, 31 Aug 2009 21:04:59 -0300 From: Arturo 'Buanzo' Busleiman <[email protected]> Subject: about Speedy URL DoS To: Lauren Weinstein <[email protected]> Organization: GNU/Buanzo OpenPGP: id=6857704D -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 This is the advisory's url: http://blogs.buanzo.com.ar/2009/08/netcache-url-dos-speedy-argentina-advisory.html Yours, - -- Arturo "Buanzo" Busleiman / Arturo Busleiman @ 4:900/107 Independent Linux and Security Consultant - SANS - OISSG - OWASP http://www.buanzo.com.ar/pro/eng.html Mailing List Archives at http://archiver.mailfighter.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEAREKAAYFAkqcZSsACgkQAlpOsGhXcE1IAgCdG/chyehA89pTBloVgjK20c6s vvsAnRC6uzOhdEgy1GZDkGKGWuOgDG8R =rP7N -----END PGP SIGNATURE----- ----- End forwarded message -----
