[Full-Disclosure] Re: Global HIGH Security Risk

From: ^Shadown^ (shadown@bariloche.com.ar)
Date: 02/07/03

  • Next message: bugzilla@redhat.com: "[Full-Disclosure] [RHSA-2003:044-20] Updated w3m packages fix cross-site scripting issues" 
    From: ^Shadown^ <shadown@bariloche.com.ar>
To: full-disclosure@lists.netsys.com
Date: Fri, 7 Feb 2003 01:16:34 -0300

    Hi,
            I ask for apologize if I was unclear.
            I've seen many people who understood that "bypass" was the meaning of pass trough filtered ports, and I didn't wanted to say that.
            What I've wanted to say is that if a firewall is set up to stop reverse telnet techniques by closing all ports to let the server go to outside, and there were deleted gcc, vi, ed (anything that could be used as a text editor) and uudecode/uuencode (and other en/decoders), it wasn't enough to stop an attacker to upload (xploits, etc) and download files, and obviously execute then on the server. I saw many servers set up like this so I wanted to prevent everybody to this kind of attack. And I thought it was important enough to be posted.
            Again forgive me if I was unclear on what I've wanted to say.
            Best regards,
                    ^Shadown^
    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html