Welcome to a honey pot putz!
On Tue, 2003-10-14 at 19:21, Lorenzo Hernandez Garcia-Hierro wrote:
Hi again,
naade02.msfc.nasa.gov host of nasa is too affected by security holes,
in this case the stupid hole of maintain sample scripts of iis in the
webroot.
http://naade02.msfc.nasa.gov/scripts/samples/
http://naade02.msfc.nasa.gov/samples/
http://naade02.msfc.nasa.gov/IISsamples/
w00w,
NOTE: attacking possibilities are related with FPExtensions in the
directories.
VENDOR NOTICED: No contat info found
NOTE 2: OPEN AN ACCOUNT FOR SECURITY ISSUES
Best regards,
---
0x00-Lorenzo Hernandez Garcia-Hierro
0x01-/* not csh but sh */
0x02-$ PATH=pretending!/usr/ucb/which sense
0x03- no sense in pretending!
__
PGP: Keyfingerprint
4ACC D892 05F9 74F1 F453 7D62 6B4E B53E 9180 5F5B
ID: 0x91805F5B
**
No Secure Root Group Security Research Team
http://www.nsrg-security.com
__
___
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
___
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
