[ advisories | exploits | discussions | news | conventions | security tools | texts & papers ]
 main menu
- feedback
- advertising
- privacy
- FightAIDS
- newsletter
- news
- read forum
- new topic
- search

- meetings list
- recent additions
- add your info
 top 100 sites
- visit top sites
- sign up now
- members

- add your url
- add domain
- search box
- link to us

- our projects
- free email
 m4d network
- security software
- secureroot
- m4d.com
Home : Advisories : Remote DoS Attack in Eeye Iris 1.01 and SpyNet CaptureNet v3.12 Vulnerability

Title: Remote DoS Attack in Eeye Iris 1.01 and SpyNet CaptureNet v3.12 Vulnerability
Released by:
Date: 31st August 2000
Printable version: Click here

Hash: SHA1

Remote DoS Attack in Eeye Iris 1.01 and SpyNet CaptureNet v3.12


USSR Advisory Code:  USSR-2000052

Release Date:

August 31, 2000

Systems Affected:

Eeye Iris 1.01

SpyNet CaptureNet v3.12


The Ussr Team has found a problem in Eeye IRIS 1.01, There is a heap

memory buffer o

verflow in IRIS 1.01 that causes not only this network sniffing

program to crash,

but also to take system resources up to 100% usage, until it crashes.

The vulnerability arises after sending multiple udp connection to

random ports

on the host that IRIS or SpyNet CaptureNet is running.

The results of this will cause the following crash:



That we take no responsibility for this code it is for educational

purposes only.

D.O.S Code:

Binary or source (console win32)


Vendor Status:

Send me the advisory if you want, otherwise your wasting my fucking



Marc Maiffret

Chief Hacking Officer

eCompany / eEye





Install Free Ethereal for win32, Ethereal is Open Source software

released under the GNU

General Public License. and it does the same thing

http://ethereal.zing.org/ ,or wait untill

Eeye fix this kind of attack.

Vendor   Url: http://www.eeye.com

Program  Url: http://www.eeye.com/html/Products/Iris/overview.html

Download Url: http://www.eeye.com/iris/iris101.exe

SpyNet   Url:


Related Links:

Underground Security Systems Research:


CrunchSp Product:


To all of you security and hacking related enthusiasts out there,

come chat with us on our own IRC server:

irc.ussrback.com port: 6667 #ussrback


USSR is a young company based in South America devoted to

research about computers, network security, and software

protection systems

One of the main objectives of USSR is to develop and implement new

security and protection systems based on our knowledge and


However, we believe that the way we implement security solutions,

can make a difference, CrunchSP is a good example.

In our day to day research we detect vulnerability issues in

different applications that we publish on our advisory board.

Most of USSR programmers and partners have more than 12 years

of experience in different computer based applications, with

great knowledge in high and low level programming languages.

For further information on USSR, feel free to contact us by email.

USSR has assembled some of the worlds greatest software developers

and security consultants to help us provide our customers this great

range of security services:

* Network Penetration Testing

* Security Application development

* Application Security Testing and Certification

* Security Based on Security Tools

* Cryptography

* Emergency Response Team

* Firewalling

* Virtual Private Networking

* Intrusion Detection

* Support and maintenance

Copyright (c) 1999-2000 Underground Security Systems Research.

Permission is hereby granted for the redistribution of this alert

electronically. It is not to be edited in any way without explicit

consent of Ussr. If you wish to reprint whole or any part of this

alert in any other medium excluding electronic medium, please e-mail

labs@ussrback.com for permission.


The information within this paper may change without notice. We may

not be held responsible for the use and/or potential effects of these

programs or advisories.  Use them and read them at your own risk or

not at all. You solely are responsible for this judgement.


Please send suggestions, updates, and comments to:

Underground Security Systems Research




Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>





(C) 1999-2000 All rights reserved.