Here's some info:
http://www.wiretrip.net/rfp/p/doc.asp?id=45&iface=2
>
> Please pass along this security write up-
>
> thanks for all your work Michael...
>
> james
> -----Original Message-----
> From: Michael Dinowitz [mailto:[EMAIL PROTECTED]]
> Sent: Friday, April 14, 2000 11:04 AM
> To: [EMAIL PROTECTED]
> Subject: Re: WAY OT: backdoor affecting IIS and FP 98 extensions
>
>
> If anyone wants, I've got a write-up on this from RFP that goes into ALL
the
> details. I'll send it over off list.
>
> > I know that this is way off topic, but I think that it's important for
> > everyone to know about this hack, since it affects IIS, NT's default
> > webserver. There is a dll included in IIS and in FrontPage 98 Extensions
> > that includes a backdoor password to the server. And of course, the
> > password is something about Netscape being "weenies." People will be
> trying
> > to use this asap to take advantage of unknowing server admins, so if any
> of
> > you think you could be affected, take a look at these articles.
> >
> > Slashdot has a copy of the text from the Wall Street Journal article
(you
> > have to *pay* to subscribe to WSJ online news).
> > http://slashdot.org/articles/00/04/14/0619206.shtml
> > There is also an article at ZDNet
> >
>
http://www.zdnet.com/zdnn/stories/news/0,4586,2543490,00.html?&_ref=12652509
> 18
> >
> > It's also been covered at Hacker News Network. It hasn't been covered on
> > 2600 yet, but Hacker News Network and Slashdot are frequented by hacker
> > types, including the malicious ones. The word is out, but there is a
> remedy
> > listed in the articles.
>
> --------------------------------------------------------------------------
> ----
> > Archives: http://www.eGroups.com/list/cf-talk
> > To Unsubscribe visit
> http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
> send a message to [EMAIL PROTECTED] with 'unsubscribe' in
> the body.
> >
>
> --------------------------------------------------------------------------
--
> --
> Archives: http://www.eGroups.com/list/cf-talk
> To Unsubscribe visit
> http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
> send a message to [EMAIL PROTECTED] with 'unsubscribe' in
> the body.
> --------------------------------------------------------------------------
----
> Archives: http://www.eGroups.com/list/cf-talk
> To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.
>
------------------------------------------------------------------------------
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
