RE: header based explotation

From: Brett Moore (brett@softwarecreations.co.nz)
Date: 06/09/02


From: "Brett Moore" <brett@softwarecreations.co.nz>
To: "Powertech" <r2d2@getrewted.com.ar>, <pen-test@securityfocus.com>
Date: Mon, 10 Jun 2002 09:35:42 +1200

The lastest Host head buffer overflow for jrun.
http://www.nextgenss.com/advisories/jrun.txt

Brett

> -----Original Message-----
> From: Powertech [mailto:r2d2@getrewted.com.ar]
> Sent: Saturday, 8 June 2002 09:24
> To: pen-test@securityfocus.com
> Subject: header based explotation
>
>
> hi folks
> does any body have succeded exploitig this kind of vuln
> explained in the paper that can be found in:
> http://www.cgisecurity.com/papers/header-based-explotation.txt
> or attached in this mail
> if anybody knows software that is vulnerable to this issue please
> name it.
> thanks in advance
>
> --
> Once at a social gathering, Gladstone said to Disraeli, "I
> predict, Sir, that
> you will die either by hanging or of some vile disease".
> Disraeli replied,
> "That all depends, Sir, upon whether I embrace your principles or your
> mistress."
>
>

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/



Relevant Pages

  • Re: faster scans? (nmap)
    ... one host using nmap for syn scans in burst mode with the ... >>>This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: pen test help please asap
    ... > Machine A on client site makes a configurable encrypted OUTBOUND ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • Re: ettercap help
    ... Anyways have never tried Ettercap for VNC. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • RE: CFM SQL injection
    ... You should better use union or alike get unauthorized data from the ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: ettercap help
    ... > I can get it to sniff telnet, ftp, pop, smb, but no vnc. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)