RealNetworks patches video server vulnerability

Published: 29 April 2000 y., Saturday
The flaw permits what is known as a "denial- of-service" attack against specific RealServers. A denial-of- service attack is one that floods a server with a volume of bogus requests or that exploits a vulnerability so that it can't respond to legitimate demands for information. A Buenos Aires-based security firm called Underground Security Systems Research (USSR) posted a demonstration exploiting the flaw and a notification to the Bugtraq security mailing list. RealNetworks learned of the vulnerability and the demonstration exploit, dubbed "realdie.exe," through the Bugtraq post Thursday and finished work on its remedy last night. "As soon as we found out about it, we deployed a tiger team to analyze it, created a fix, put it through quality assurance testing, and posted it," a RealNetworks representative said. "We had a group of developers focused on it for the day. We treat all of these things very seriously." The denial-of-service attack and its cousin, the distributed denial-of-service attack, gained notoriety this year after attacks brought down major Web sites including Yahoo, eBay and Amazon.com.
Šaltinis: winfiles.com
Copying, publishing, announcing any information from the News.lt portal without written permission of News.lt editorial office is prohibited.

Facebook Comments

New comment


Captcha

Associated articles

Nigeria: ATM is Now a Fraud - Victim

INTERVIEW: Fraud victim describes mistrust of ATMs in Nigeria. more »

Cisco IP Video Technology to Enable Groundbreaking NBC Coverage of Beijing Olympic Games

Cisco announced today it has been selected to provide Internet Protocol (IP) video network infrastructure and video-encoding solutions to NBC during the network's coverage of the 2008 Beijing Olympic Games, Aug. 8-24. more »

Microsoft and NBC Deliver Groundbreaking Online Olympics Viewing Experience

Q&A: Executives from MSN, NBC and Microsoft offer details behind the largest online broadcasting event in history. more »

HP, Intel and Yahoo! Create Global Cloud Computing Research Test Bed

The goal of the initiative is to promote open collaboration among industry, academia and governments by removing the financial and logistical barriers to research in data-intensive, Internet-scale computing. more »

Microsoft Announces Reorganization of Windows and Online Services Business

Platforms & Services Division to Split Into Two Groups and Report to CEO Steve Ballmer. more »

Privacy to the Test – Exploring the Limits of Online Anonymity and Accountability

More can be done to ensure that people can be confident that their privacy will be protected online. more »

Government says card fraud on the rise in U.K.

A UK crime survey shows credit and debit card fraud has reached a record high of £535 million. more »

Cisco Combat Exam Fraud with Global Test Delivery Enhancements

New security measures underscore commitment to protect certification integrity and value. more »

Sparkasse KölnBonn standardizes its branch IT with technology from Wincor Nixdorf

Sparkasse KölnBonn has just concluded a framework agreement with Wincor Nixdorf. The agreement covers more than 500 devices. more »

Aladdin Knowledge Systems Reports Second Quarter 2008 Financial Results

Aladdin Knowledge Systems Ltd. (NASDAQ: ALDN), an information security leader specializing in authentication, software DRM and content security, today announced financial results for the second quarter of fiscal year 2008. more »