Re: [Full-disclosure] Harvard.edu LFI

From: Hack Talk <hacktalkblog@xxxxxxxxx>
Date: Mon, 31 Jan 2011 13:26:22 -0500

Well that was fast,

As some proof here's a screenshot of the /etc/passwd file:

http://i.imgur.com/HKA51.png

Luis Santana - Security+
Administrator - http://hacktalk.net
HackTalk Security - Security From The Underground
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

References:
- [Full-disclosure] Harvard.edu LFI
  - From: Hack Talk
- Re: [Full-disclosure] Harvard.edu LFI
  - From: peter
- Re: [Full-disclosure] Harvard.edu LFI
  - From: Andrew Kirch

Prev by Date: Re: [Full-disclosure] Harvard.edu LFI
Next by Date: [Full-disclosure] ZDI-11-034: HP OpenView Performance Insight Server Backdoor Account Code Execution Vulnerability
Previous by thread: Re: [Full-disclosure] Harvard.edu LFI
Next by thread: [Full-disclosure] Vulnerability discloses PIN used in Microsoft Excel secure printing
Index(es):
- Date
- Thread

Relevant Pages

[NT] User Downgraded from Administrator to User Retains the Ability to List Other Users Running Task
... Beyond Security would like to welcome Tiscali World Online ... Windows XP presents a new option called "Fast User Switching" (FUS). ... Eitan has found that if a user is downgraded from an administrator role to ... as shown in task manager)) via tempting the local ...
(Securiteam)
Re: Is complete home security possible?
... > If you are a gamer, some computer games will only run in administrator ... I have a clean disk image made from Norton Ghost, ... security issues to deal with to do it monthly, ... I have been using computers since 76, never had a virus on any of my ...
(comp.security.firewalls)
Re: FOR A SKILLED IT EXPERT - WIN2K SERVER - DOMAIN CONTROLLER
... After installing a parallel copy of WIN2K SERVER, ... Administrator access in Directory Services Restore Safe Mode. ... This reset the local policy back to ... manual security reset. ...
(microsoft.public.win2000.security)
[Full-disclosure] "run as" local denial-of-service enables administrative account proces
... Windows XP Professional with SP2 ... While a user, at any security membership ... A contributing factor to the success of the attack ... Log in to the computer as a local administrator. ...
(Full-Disclosure)
"run as" local denial-of-service enables administrative account processes to be killed
... Windows XP Professional with SP2 ... While a user, at any security membership ... A contributing factor to the success of the attack ... Log in to the computer as a local administrator. ...
(Bugtraq)