[Full-disclosure] Skype Network Remote DoS Exploit

Valery Marchuk tecklord at argocom.cv.ua
Fri Aug 17 08:13:04 BST 2007


Hi all!



On SecurityLab.ru forum an exploit code was published by an anonymous user. 
Reportedly it must have caused Skype massive disconnections today.



The PoC uses standard Skype client to call to a specific number. This call 
causes denial of service of current Skype server and forces Skype to 
reconnect to another server. The new server also "freezes" and so on ... the 
entire network.



Liks: http://www.securitylab.ru/news/301422.php

PoC: http://en.securitylab.ru/poc/301420.php



Best regards,

Valery Marchuk

www.SecurityLab.ru










Full-Disclosure is hosted and sponsored by Secunia.