OpenX Ad-Server Vulnerability

SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

OpenX Ad-Server Vulnerability
A vulnerability in some "random ad server" software wouldn't be terrible big news, but in this case I decided to spent a couple minutes on it. OpenX is somewhat popular, and used by various sites to server ads. Not only that... the vulnerability is actively being exploited. And to make things worse: The OpenX.com site is down, so you can't download a patch or any details "direct from the source". We have seen compromised ad servers being used in the past to inject malicious content into various "trusted" pages and I am a bit afraid that we will see some of this with these OpenX vulnerabilities. For more details: http://blog.sucuri.net/2010/09/openx-users-time-to-upgrade.html (thanks to David of Sucuri for the heads up) ------ Johannes B. Ullrich, Ph.D. SANS Technology Institute Twitter I will be teaching next: Defending Web Applications Security Essentials - SANS Cyber Security West: March 2021	Johannes 4069 Posts ISC Handler Sep 16th 2010
Thread locked Subscribe	Sep 16th 2010 1 decade ago