Re: List /home directory without logging in?

From: David Magda (dmagda+trace040423_at_ee.ryerson.ca)
Date: 07/05/04

  • Next message: Bit Twister: "Re: List /home directory without logging in?" 
    Date: 05 Jul 2004 17:09:17 -0400

    alanwbaker@yahoo.com (Alan Baker) writes:

    > Good idea about a vulnerable web CGI script that reveals /home.
    > I'm running mailman (pop-mail reader written in Perl) and cgipasswd
    > (password-changer written in PHP). They have no documented
    > vulnerabilities I can find. Further suggestions?

    Do you have NFS enabled? 

    -- 
David Magda <dmagda at ee.ryerson.ca>, http://www.magda.ca/
Because the innovator has for enemies all those who have done well under
the old conditions, and lukewarm defenders in those who may do well 
under the new. -- Niccolo Machiavelli, _The Prince_, Chapter VI
  • Next message: Bit Twister: "Re: List /home directory without logging in?"

    Relevant Pages