u n d e r g r o u n d s e c u r i t y s y s t e m s r e s e a r c h

USSR is an emerging security company based in South America devoted to research about computer & networks security and software protection systems. One of the main objectives of USSR is to develop and implement new security and protection systems based on our knowledge and experience

Security Advisories: Remote DoS attack against SSH Secure Shell for Windows Servers Vulnerability	16 MAR 01
UssrLabs has recently discovered a problem with Windows versions of sshd. The problem lies with adjacent connection handling where the sshd is unable to handle 64 simulataneous connections. As a result the sshd will crash, and no services to the sshd will be accepted.[......]

Security Advisories: 1st Up Mail Server v4.1 Buffer Overflow Vulnerability	25 DEC 00
The Ussr Team has recently discovered a Buffer Overflow in 1st Up Mail Server v4.1 where they do not use proper bounds checking. The overflow is in the field "mail from: <", a large number of aaaaaa's "> (over 300).

Security Advisories: System Monitor ActiveX Buffer Overflow Vulnerability	5 NOV 00
The USSR Team has found a problem in the Microsoft System Monitor ActiveX control (class id: C4D2D8E0-D1DD-11CE-940F-008029004347, sysmon.ocx) in the Value field name "LogFileName", which could be used by malicious user to potentially run code on another user’s machine.

Security Advisories: Ultraseek 3.1.x Remote DoS Vulnerability	30 OCT 00
The USSR Team has found problem with the Ultraseek Search engine. The Ultraseek Search engine is vulnerable to a Denial of Service attack. Upon connecting to the search engine, which by default runs on port 8765, it is possible to pass a malformed URL to the engine that will cause the process to stop responding to valid requests.

Security Advisories: HyperTerminal Buffer Overflow Vulnerability	18 OCT 00
The USSR Team has found a buffer overflow in the HyperTerminal telnet client, which is in the code that processes the Telnet URL's, that can enable an attacker to execute arbitrary code on another user's system.

Security Advisories: TransSoft's Broker FTP Server 3.x & 4.x Remote DoS attack Vulnerability	18 OCT 00
The USSR Team has found a buffer overflow in the Broker FTP Server, which can enable an attacker to execute a denial of service attack against it.

Security Advisories: Malformed Embedded Windows Media Player 7 "OCX Attachment" Vulnerability	26 SEP 00
The USSR Team has found a problem in the Windows Media Player 7 ActiveX control, which could be used in a denial of service attack against RTF-enabled e-mail clients such as Outlook 2000 and Outlook Express.

Security Advisories: Remote DoS Attack in Eeye Iris 1.01 and SpyNet CaptureNet v3.12 Vulnerability	31 AUG 00
The Ussr Team has found a problem in Eeye IRIS 1.01, There is a heap memory buffer overflow in IRIS 1.01 that causes not only this network sniffing program to crash, but also to take system resources up to 100% usage, until it crashes

IRC.USSRBACK.COM IS OPEN!	29 AUG 00
To all of you security and hacking related enthusiasts out there, come chat with us on our OWN IRC server: irc.ussrback.com port 6667 #ussrback

Security Advisories: Remote DoS Attack in Pragma TelnetServer 2000 (Remote Execute Daemon) Vulnerability	24 AUG 00
What happens is by performing an attack with a malformed request to port 512 it will cause the process containing the services to stop responding.

Security Advisories: Remotely Exploitable Buffer Overflow in Outlook "Malformed E-mail MIME Header" Vulnerability	19 JUL 00
"the new generation of virus is here. by sending a malformed e-mail you can run arbitrary code on the remote machine." The Ussr Labs team has recently discovered an exploitable buffer overflow in all versions of Outlook. Exploit here.

Security Advisories: Remote DoS Attack in WircSrv Irc Server v5.07s Vulnerability	10 JUL 00
What happens is by performing an attack with a malformed request to port 6667 it will cause the process containing the services to stop responding.

Security Advisories: Remote DoS Attack in LocalWEB HTTP Server 1.2.0 Vulnerability	04 JUL 00
What happens is by peforming an attack with a malformed url information to port 80 it will cause the process containing the services to stop responding.

Security Advisories: Remote DoS Attack in Small HTTP Server ver. 1.212 Vulnerability	16 JUN 00
What happens is by peforming an attack with a malformed url information to port 80 it will cause the process containing the services to stop responding.

Security Advisories: Multiples Remotes DoS Attacks in Dragon Server v1.00 and v2.00 Vulnerability	16 JUN 00
Ussr Labs found multiple places in Dragon Server where they do not use proper bounds checking. The following all result in a Denial of Service against the service in question.

What's that site running?

Hostname:	Help

Example: What's www.microsoft.com:80 running?

Ussr Products	28 NOV 99
Over 900 crackers trying crack protected file with CrunchSp 1.05. many people are commenting about how to do it, how much time can it take, until now nobody has done it

Ussr Products - SOFTWARE CRACKING CHALLENGE	27 NOV 99
Our team has opened a security challenge for those who want to try to crack our Dongle based software protection system Crunch SP 1.05.

Privacy Statement