Re: Reported Kazaa and Morpheus vulnerabilities

From: tfm@tfm.org
Date: 02/04/02 

From: <tfm@tfm.org>
To: <vuln-dev@securityfocus.com>
Date: Mon, 4 Feb 2002 11:05:58 +0100

Under search menu select "everything" and search for system.ini to see how
many users share windows directory.
This morning I've found 10 users with 428273 online users.
You can easily find the ip of these ones and browse their hd.
Maybe it's better if someone release a patch to disable "c:\windows" sharing
or a simple popup alert windows...
Bye

TfM

----- Original Message -----

> RE the article on the BBCs website at
> http://news.bbc.co.uk/hi/english/sci/tech/newsid_1798000/1798095.stm
>
> I just searched the archives at Securityfocus and CERT and neither
produced
> any relavent results
>
> I mean, pointing a browser to http://ip_address:1214/ does give a list of
> files... it gives the list of files that you're sharing. So what?
>
> Anyone know anything about this?
>
> Harry M
>
>

Relevant Pages

  • RE: Reported Kazaa and Morpheus vulnerabilities
    ... list almost 3 months ago in regards to limewire. ... thread with the subject limewire unauthorized cookie disclosure. ... People have been sharing there hardrives inappropriately for some ... many users share windows directory. ...
    (Vuln-Dev)
  • Sharing all files and folders
    ... I want to allow sharing across ... my peer-to-peer LAN of the XP Windows directory. ... and ACCESS DENIED messages when trying to access ...
    (microsoft.public.windows.file_system)