DMasti Network: Remote Code Execution

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlwtO6LUijLs7l8HXrTh0_NcJU3bvV9_m5_dOhY0NTlRdVmlNRFwhfRuqviDKF0Qyk4yso-1sp-Dp9Zym2YT9QPeL5dl0_GIekIWwvP5dQQeg8psSNMf45WOp_Eg3GYjovFA-2YtpJ4Zo/s1600/hacking-render-farm-using-nvidia-vulnerability.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="285" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlwtO6LUijLs7l8HXrTh0_NcJU3bvV9_m5_dOhY0NTlRdVmlNRFwhfRuqviDKF0Qyk4yso-1sp-Dp9Zym2YT9QPeL5dl0_GIekIWwvP5dQQeg8psSNMf45WOp_Eg3GYjovFA-2YtpJ4Zo/s320/hacking-render-farm-using-nvidia-vulnerability.jpg" width="320" /></a></div><div style="text-align: justify;">A security vulnerability in Nvidia mental ray, a high performance 3D rendering software allows hackers to take control of an entire "render farm", says security researchers at ReVuln.<br /><br />A Render farm is a cluster of specialized computers designed for rendering images, typically used for creating visual effects in films.  Render farms have high computational capability.<br /><br />The mental ray is available as stand alone software and also embedded into popular software like AutoCAD, Autodesk 3ds Max, Autodesk Maya, Cinema 4D, Domus3D.<br /><br />By just sending a malicious packet to the target machine, a hacker can load arbitrary DLLs on a victim's machine; Injecting malicious remote library allows attacker to take control of the entire render farm.<br /><br />The mental ray version 3.11.1.10 is only affected by this vulnerability.<br /><br />What will you do when you get access to a system that has huge computation capability? A hacker definitely attempt to use it for password cracking or Bitcoin Mining.<br /><br />You can find the white paper here: <a href="http://revuln.com/files/ReVuln_Nvidia_mental_ray.pdf" target="_blank">http://revuln.com/files/ReVuln_Nvidia_mental_ray.pdf</a></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Thursday, December 12, 2013</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Vulnerability in NVIDIA mental ray allows hackers to take control of render farms

A security vulnerability in Nvidia mental ray, a high performance 3D rendering software allows hackers to take control of an entire "re...