Threat Level: green Handler on Duty: Tom Webb

SANS ISC: Port 554 increase, Solar flare activity continues - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Port 554 increase, Solar flare activity continues
Port 554

Over the last few days we observe a small but significant increase in the
number of sources scanning port 554.

http://www.dshield.org/port_report.php?port=554&recax=1&tarax=1&srcax=2&days=10

This port is used by the "Real Time Stream Control Protocol" (rtsp). RTSP one of the protocols used to stream audio suing a 'Realserver' (Real Audio). Late last
year, a buffer overflow was found in Real Server, which can be triggered via invalid RTSP data: http://www.service.real.com/help/faq/security/bufferoverrun12192002.html . This flaw has been exploited widely in the past and an exploit has been available for several months.

Solar Flare Activity

Yet another large solar flare erupted earlier today. Like last weekend, the solar flare ejected a large amount of charged particles, which may interfere with communications later this week. For current space weather reports, see http://www.sel.noaa.gov/today.html .
Handlers

76 Posts

Sign Up for Free or Log In to start participating in the conversation!