MPack: Getting More Dangerous

In our previous alert we discussed ‘What is Mpack and how it works’. We had reviewed MPack version 0.84 in our previous blog. This time we will compare it with an updated version, MPack v 0.91.

1. The exploits include the existing ones present in v0.84. The list of exploits is present at the end of this blog.

2. There have been some changes to the management and reporting interface. A new file admin.php is introduced and stats.php has been removed.

The developers of the tool kit have provided admin.php for secure control and configuration of the Mpack installation. The Mpack owner can set username and password protection through settings.php.

http://www.symantec.com/enterprise/security_response/weblog/2007/08/mpack_getting_more_dangerous.html