Streaming media giant RealNetworks Friday morning posted a patch for a flaw in its video servers that leaves them vulnerable to crippling attacks.
Published:
29 April 2000 y., Saturday
The flaw permits what is known as a "denial- of-service"
attack against specific RealServers. A denial-of- service attack is one that floods a server with a volume of bogus requests or that exploits a vulnerability so that it can't respond to legitimate demands for information. A Buenos Aires-based security firm called Underground Security Systems Research (USSR) posted a demonstration exploiting the flaw and a notification to the Bugtraq security mailing list. RealNetworks learned of the vulnerability and the demonstration exploit, dubbed "realdie.exe," through the Bugtraq
post Thursday and finished work on its remedy last night.
"As soon as we found out about it, we deployed a tiger team to analyze it, created a fix, put it through quality assurance testing, and posted it," a RealNetworks representative said. "We had a group of developers focused on it for the day. We treat all of these things very seriously." The denial-of-service attack and its cousin, the distributed denial-of-service attack, gained notoriety this year after attacks brought down major Web sites including Yahoo, eBay and Amazon.com.
Copying, publishing, announcing any information from the News.lt portal without written permission of News.lt editorial office is prohibited.
The most popular articles
Software company announced new structure_ of it_s business.
more »
The iPhone's new “ATM Hunter” is a a free iPhone application built by MasterCard that allows users to quickly find the ATMs that are closest to them.
more »
In security breach cases last year, such as Hannaford Bros. supermarket and the card processing firm Heartland Payment Systems, cybercriminals gained access to millions of consumers' credit card details.
more »
Ingenico, a provider of payment solutions, says contactless technology will split the retail market this year, improving sales figures for early adopters and costing those who shun the additional investment in this burgeoning technology.
more »
Widevine Technologies today announced that the US Patent and Trademark Office has reconfirmed the validity of many claims of Widevine's U.S.
more »
Nokia Corp., the world's largest maker of cell phones, is making a large investment in California-based Obopay Inc., a startup that's pushing person-to-person mobile-payments technology.
more »
The increasing amount of overlap and duplication of data, tasks and processes in their anti-fraud and anti-money laundering divisions is driving banks to seek synergies between compliance, risk management and security, according to a new report from Datamonitor.
more »
The total number of IPTV subscribers worldwide passed the 20mn mark at the end of 2008, according to new figures from Informa Telecoms & Media, taking into account both disclosed and estimated figures.
more »
The IPTV World Forum opened its doors this morning on a bright London day, and the mood was equally optimistic indoors, with the conference rooms packed for keynote presentations from Christopher Schläffer of Deutsche Telekom, Christophe Forax from the European Commission and the BBC's Richard Halton, charged with making Project Canvas a reality.
more »
A new Gartner Inc. report suggests that financial fraud could drive consumers away from banks and into the arms of electronic payment systems, such as PayPal, that they perceive to be more secure.
more »
In the last year this more than doubles the number of cards and devices in circulation around the world.
more »