SPYWARE: Iowa WebDownloader
This signature detects the runtime behavior of the Spyware Iowa WebDownloader. Iowa WebDownloader downloads and installs applications on a victim's machine without user consent. During installation, it can also close victim's firewalls and antivirus programs.
Extended Description
OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerability affects the client side of OpenSMTPD, it is possible to attack a server because the server code launches the client code during bounce handling.
Affected Products
Fedoraproject fedora
Short Name
SPYWARE:GM:IOWAWEBDOWNLOADER
Severity
Minor
Recommended
False
Recommended Action
None
Category
SPYWARE
Keywords
Iowa WebDownloader
Release Date
05/15/2007
Supported Platforms
mx-19.3
vmx-19.3
vsrx-19.2
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vmx-19.4
mx-19.4
srxevo-25.4
vsrx-26.2
srx-26.2
srx-branch-26.2
vsrx3bsd-26.2
mx-12.3
srx-12.3
srx-branch-12.3
vsrx-12.3
Sigpack Version
3716
False Positive
Unknown
Vendors
Opensmtpd
Fedoraproject
Debian
Canonical