Re:Drupal Core – Highly Critical Public Service announcement
by acveilleux on Thursday October 30, 2014 @12:16AM
(#8531348)
This is just the lowest hanging fruit possible:
1. Widely deployed software.
2. Internet facing on purpose.
3. Trivial to fingerprint.
4. Fairly robust exploit (doesn't crash the target or require version specific offsets, magic numbers, etc.)
And yes, when similar bug happens that meet these characteristics, mass scale exploitation will follow quickly after for various purpose (spamming, google ranking scam, DDOS, etc.)
1. Widely deployed software.
2. Internet facing on purpose.
3. Trivial to fingerprint.
4. Fairly robust exploit (doesn't crash the target or require version specific offsets, magic numbers, etc.)
And yes, when similar bug happens that meet these characteristics, mass scale exploitation will follow quickly after for various purpose (spamming, google ranking scam, DDOS, etc.)