Top

Sykpe’s Outage caused by exploit?

August 20, 2007

It appears that lasts week's Skype service disruptions are associated with a
malformed address URI submitted by a Skype client. Sending a long malformed
Found this on the voipsec list.... interesting..

URI cripples the Skype server which causes the Skype client to reconnect to
the next Skype server and submits the same query which has the same effect.
In essence the attacker can traverse the list of Skype servers and disrupt
the entire Skype network.

Here is the link to the code.
http://en.securitylab.ru/poc/extra/301419.php

Does anyone have any additional info on this?

Peter

Comments

Got something to say?





Bottom