Re: Pen-Testing help (Compaq Insight & htsearch)

From: Philipp Stucke (philipp.stucke@t-online.de)
Date: 12/11/01


From: "Philipp Stucke" <philipp.stucke@t-online.de>
To: "Tim Russo" <trusso@wireguided.com>, <pen-test@securityfocus.com>
Date: Tue, 11 Dec 2001 11:24:44 +0100


> Questions:
>
> 1) I know Insight Manager has buffer overflows and can be used as a proxy.
> Do exploits for the buffer overflows exist? Also, I am not sure if I am
> configuring the proxy client correctly. Anyone have luck with this?

There is an exploit, but it is not for Digital-Unix. See exploit and what
Compaq answered here:
http://www.securityfocus.com/archive/1/243142
http://www.securityfocus.com/archive/1/244339

Regards, Philipp

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/



Relevant Pages

  • Re: Buffer Overflow Help
    ... > I am trying to experience buffer overflows first hand. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... This list is provided by the SecurityFocus Security Intelligence Alert Service. ... For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: ...
    (Pen-Test)
  • Re: buffer overflows
    ... Juliano has a great site dedicated to papers like this. ... > Mudge's and Aleph1's papers on buffer overflows ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: buffer overflows
    ... Subject: buffer overflows ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • RE: buffer overflows
    ... Subject: buffer overflows ... a few articles probably not on above lists ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: IIS 5.0 with Integrated Window Authentication
    ... >> seem to make it through the proxy, ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)