mailing list archives
Kaspersky Lab Online Activation Center remote brute force vulnerability
From: www417 <www417 () gmail com>
Date: Sun, 21 Sep 2008 09:48:17 +0800
I found vulnerability in Kaspersky Lab Online Activation center (
The threat will help a remote attacker to brute force activation code
and sale to victim.
Remote attackers only need a script (Perl or Python or Windows Batch) and a
GUN program (wget or curl).
Although the number of activation code is so huge that brute force, but I
still have idea for make it easy.
Successfully exploitation the threat, remote attackers have ability to
online steal lots activation codes.
I have posted a POC for showing the thread, you can download from
I also added a file, named "Readme.txt" for detail how to use the tool.
Please scan the tools by your Anti-Virus, and then test them on safely
* I also had sent the detail of the vulnerability to Kaspersky, but looks
like they did not interest. :(
Thanks and Regards
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/
- Kaspersky Lab Online Activation Center remote brute force vulnerability www417 (Sep 21)