Re: [Full-Disclosure] Vulnerability in sourceforge.net

From: Gregory A. Gilliss (ggilliss_at_netpublishing.com)
Date: 07/22/04

  • Next message: bugtraq_at_beyondsecurity.com: "SWAT PreAuthorization PoC" 
    To: full-disclosure@lists.netsys.com
Date: Thu, 22 Jul 2004 13:31:21 -0700

    Really...FreeBSD comes with user nobody set to /sbin/nologin out of the
    box. Maybe they should have chosen a better host OS?

    G

    On or about 2004.07.22 07:49:53 +0000, Todd Towles (toddtowles@brookshires.com) said:

    > Sounds like they should have configured that page a bit different...made it
    > run under a little less access...or said I say..it is a mis-configuration.
    > =) 

    -- 
Gregory A. Gilliss, CISSP                              E-mail: greg@gilliss.com
Computer Security                             WWW: http://www.gilliss.com/greg/
PGP Key fingerprint 2F 0B 70 AE 5F 8E 71 7A 2D 86 52 BA B7 83 D9 B4 14 0E 8C A3
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
  • Next message: bugtraq_at_beyondsecurity.com: "SWAT PreAuthorization PoC"

    Relevant Pages

    • RE: [Full-Disclosure] sans.org
      ... Ya know - I've been meaning to post this all day ... %> host www.sans.org ns2.berkeley.edu ... Full-Disclosure - We believe in it. ... Charter: http://lists.netsys.com/full-disclosure-charter.html ...
      (Full-Disclosure)
    • Re: [Full-disclosure] Re: Google is vulnerable from XSS attack
      ... because you can't afford your own domain or know how to host your own ... shit makes you 1337. ... > Full-Disclosure - We believe in it. ... > Charter: http://lists.grok.org.uk/full-disclosure-charter.html ...
      (Full-Disclosure)
    • Re: [Full-disclosure] Linux - Indicators of compromise
      ... Is your question about investigating a set of servers you suspect may be infected, or setting up a steady state monitoring strategy to alert when/if a host is compromised? ... Full-Disclosure - We believe in it. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
      (Full-Disclosure)
    • RE: [Full-Disclosure] sans.org
      ... Someone can resolve it to 65.173.218.106, which does appear to be the SANS ... %> host www.sans.org ns2.berkeley.edu ... Full-Disclosure - We believe in it. ... Charter: http://lists.netsys.com/full-disclosure-charter.html ...
      (Full-Disclosure)
    • Re: [Full-Disclosure] Sasser skips 10.x.x.x Why?
      ... it iterates through all the host IP ... Full-Disclosure - We believe in it. ... Charter: http://lists.netsys.com/full-disclosure-charter.html ...
      (Full-Disclosure)