OSVDB ID: 66498

Title: Gheg Bot ntdll::RtlAllocateHeap Function C&C Message Parsing NULL Dereference Remote DoS

Info

Disclosure

Feb 27, 2010

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Solution: Workaround
Disclosure: Uncoordinated Disclosure

Solution

Remove the malware from the compromised system.

Products

Unknown or Incomplete

References

Related OSVDB ID: 66497 66499 66500 66501
News Article: http://blogs.techrepublic.com.com/10things/?p=1373
Other Advisory URL: http://osvdb.org/ref/66/gheg_disclosure.txt
Generic Informational URL: http://www.m86security.com/trace/i/Gheg,spambot.897~.asp
http://www.secureworks.com/research/threats/botnets2009/

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/66498