Re: Simple PHP Newsletter Remote Admin Password Change With install path

2011-03-30 Thread Patrick Kelley
So, essentially this threat can be removed by simply deleting the install directory, which is common practice when installing web applications? On Tue, Mar 29, 2011 at 10:03 AM, cseye...@yahoo.com wrote: #

Re: HTB22905: Path disclosure in Wordpress

2011-03-30 Thread Patrick Kelley
Seems like most of the vulnerabilities from the last couple days are not actual software issues, but problems with configuration of the server or just not following the directions provided by the vendor. If that is our measure for vulnerability, I can show about 10 for the wristwatch I am

Re: HTB22905: Path disclosure in Wordpress

2011-03-30 Thread Patrick Kelley
. As to the watch analogy, I'm not sure I get it. Regards, Chris. On Wed, Mar 30, 2011 at 5:22 PM, Patrick Kelley psw...@gmail.com wrote: Seems like most of the vulnerabilities from the last couple days are not actual software issues, but problems with configuration of the server or just not following

DoS Condition with Altigen VoIP Phone Systems

2011-02-25 Thread Patrick Kelley
If you run a NMAP network scan against the IP of the phone server, it will crash the Altigen's Gateway service, rendering the system useless until rebooted. All information saved in the phone system at the time is lost. Port 5061 crashes due to HEAP Overflow. Following message: Application